# CVE-2026-118616: Ultralytics parse_model code injection remote code execution

Source: https://junglewise.ai/threats/cve-2026-118616-ultralytics-parse-model-code-injection-remote-code-execution  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-28. Updated: 2026-10-28  
License: CC BY 4.0 with a link back

CVE-2026-118616 · Severity: high · CVSS 7.8 · Published 2026-10-28

Ultralytics is a computer vision and machine learning library used to develop AI models and applications. This vulnerability allows attackers to execute arbitrary code on systems running Ultralytics by tricking users into visiting a malicious page or opening a malicious file. Successful exploitation results in complete code execution under the privileges of the affected user.

Technologies: [Ultralytics](https://junglewise.ai/threats/technologies/ultralytics-ultralytics). Vendors: [Ultralytics](https://junglewise.ai/threats/vendors/ultralytics).

## Quick answers

**Is CVE-2026-118616 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-118616 being exploited in the wild.

**How severe is CVE-2026-118616?** High severity, with a CVSS score of 7.8, published 28 October 2026.

**Which products and versions are affected?** Ultralytics Ultralytics.

**Is there a fix for CVE-2026-118616?** No fixed version is recorded yet. Restrict user interaction with the product and avoid opening untrusted files or visiting untrusted pages that may trigger the parse_model function. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-118616 attacked?** It is attacked with local access, in a software library.

**Am I affected by CVE-2026-118616?** Check whether you run Ultralytics. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix


Restrict user interaction with the product and avoid opening untrusted files or visiting untrusted pages that may trigger the parse_model function.

## Technical details

The parse_model function in Ultralytics lacks proper validation of user-supplied strings before using them to execute Python code, allowing code injection attacks. The vulnerability requires user interaction (visiting a malicious page or opening a file) and operates with local attack vector. An attacker can execute arbitrary Python code in the context of the current user.

## Affected products

- Ultralytics Ultralytics

## Timeline

- 2026-06-18: disclosed: Vulnerability reported to vendor
- 2026-10-28: advisory: Coordinated public release of advisory

## References

- [https://www.zerodayinitiative.com/advisories/ZDI-26-815/](https://www.zerodayinitiative.com/advisories/ZDI-26-815/)

## Related threats

- [Ultralytics Google Drive download path traversal remote code execution](https://junglewise.ai/threats/cve-2026-118619-ultralytics-google-drive-download-path-traversal-remote-code)
- [Ultralytics parse_model code injection remote code execution](https://junglewise.ai/threats/cve-2026-118618-ultralytics-parse-model-code-injection-remote-code-execution)
- [Ultralytics load_dataset_cache_file deserialization of untrusted data](https://junglewise.ai/threats/cve-2026-118617-ultralytics-load-dataset-cache-file-deserialization-of-untrusted)
- [Ultralytics torch_safe_load command injection remote code execution](https://junglewise.ai/threats/cve-2026-118615-ultralytics-torch-safe-load-command-injection-remote-code)
- [Ultralytics check_det_dataset code injection remote code execution](https://junglewise.ai/threats/cve-2026-118614-ultralytics-check-det-dataset-code-injection-remote-code)