Ultralytics vulnerabilities

Products

• Ultralytics 7

Newest

• ultralytics Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability CVE-2026-118619 8.8 HighOctober 28, 2026
• ultralytics Ultralytics parse_model Code Injection Remote Code Execution Vulnerability CVE-2026-118618 7.8 HighOctober 28, 2026
• ultralytics Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2026-118617 7.8 HighOctober 28, 2026
• ultralytics Ultralytics parse_model Code Injection Remote Code Execution Vulnerability CVE-2026-118616 7.8 HighOctober 28, 2026
• ultralytics Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability CVE-2026-118615 7.8 HighOctober 28, 2026
• ultralytics Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability CVE-2026-118614 7.8 HighOctober 28, 2026
• ultralytics Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2026-118613 7.8 HighOctober 28, 2026
• ultralytics fastsam Ultralytics FastSAM AutoBackend Model Loading autobackend.py session.get_modelmeta.custom_metadata_map eval injection CVE-2026-111237 4.8 MediumOctober 16, 2026
• ultralytics yolov3 Deserialization of Untrusted Data vulnerability in yolo 3 allows attackers to execute arbitrary... CVE-2021-31681 7.8 HighJuly 31, 2023
• ultralytics yolov5 Deserialization of Untrusted Data vulnerability in yolo 5 allows attackers to execute arbitrary... CVE-2021-31680 7.8 HighJuly 31, 2023