Live › vulnerability › CVE-2026-118618
Go to dashboardparse_model in Ultralytics (YOLO) executes a user-supplied string from a model config as Python code (ZDI-26-817, unpatched 0-day). Exposed: anyone using the ultralytics package who builds models from YAML configs they did not write (downloaded, community or user-uploaded). The victim must open a malicious file or page; code runs as that user. Teams loading only their own trusted configs can mostly skip it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 17:34 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|
| ultralytics | pypi | unknown | – |
pip show ultralytics: all versions presumed affected until a fix is announced<file>.yaml) or parse_model() on configs from outside your teamEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parse_model function. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-30121.
This page as .md · .json · in your agent: get_signal("CVE-2026-118618")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.