Ultralytics vulnerabilities
We track 7 vulnerabilities in Ultralytics products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on October 28, 2026.
Latest Ultralytics vulnerabilities
- 8.8 High severity
Ultralytics: Improper Limitation of a Pathname to a Restricted Directory
Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in t
- 7.8 High severity
Ultralytics: Improper Control of Generation of Code
Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the ta
- 7.8 High severity
Ultralytics: Deserialization of Untrusted Data
Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit th
- 7.8 High severity
Ultralytics: Improper Control of Generation of Code
Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the ta
- 7.8 High severity
Ultralytics: Improper Neutralization of Special Elements used in an OS Command
Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that
- 7.8 High severity
Ultralytics: Improper Control of Generation of Code
Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that
- 7.8 High severity
Ultralytics: Deserialization of Untrusted Data
Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerabil