---
id: "CVE-2026-118619"
kind: "vulnerability"
aliases: ["CVE-2026-118619"]
title: "Ultralytics: Google Drive download path traversal allows code execution"
severity: "high"
cvss: 8.8
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["package", "python", "self-hosted", "ultralytics"]
not_affected_if: ["fixed-local-models", "no-google-drive-downloads"]
published_at: "2026-10-28T17:18:29+00:00"
first_seen_at: "2026-10-28T17:34:10+00:00"
updated_at: "2026-10-28T17:36:16+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-118619", "first_seen_at": "2026-10-28T17:34:10+00:00"}]
---

# Ultralytics: Google Drive download path traversal allows code execution

Ultralytics mishandles user-supplied paths when downloading files from Google Drive, so a crafted path can write files outside the intended directory. An attacker can use this to execute arbitrary code in the context of the running process, but only after a victim visits a malicious page or opens a malicious file.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Ultralytics version with `pip show ultralytics` and compare it to the fixed release listed in the advisory
- Search the codebase for calls to Ultralytics download helpers that fetch Google Drive links, such as `attempt_download_asset`
- Confirm whether the application passes user-controlled URLs or file names into Ultralytics download functions

## Fix

- Upgrade the `ultralytics` package to the patched version named in the advisory (unknown in these sources)
- Until patched, do not pass untrusted Google Drive links or file names to Ultralytics download functions

## Timeline

- 2026-10-28T17:34:10+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-118619

## From the sources

Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the handling of downloads from Google Drive. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute arbitrary code in the context of the current process. Was ZDI-CAN-32376.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_