# CVE-2026-118618: Ultralytics parse_model code injection remote code execution

Source: https://junglewise.ai/threats/cve-2026-118618-ultralytics-parse-model-code-injection-remote-code-execution  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-28. Updated: 2026-10-28  
License: CC BY 4.0 with a link back

CVE-2026-118618 · Severity: high · CVSS 7.8 · Published 2026-10-28

Ultralytics is a computer vision library used for object detection and image analysis. This vulnerability in the parse_model function allows attackers to execute arbitrary code on systems running Ultralytics if a user visits a malicious webpage or opens a malicious file. An attacker can gain full control over the affected system with the privileges of the user running the application.

Technologies: [Ultralytics](https://junglewise.ai/threats/technologies/ultralytics-ultralytics). Vendors: [Ultralytics](https://junglewise.ai/threats/vendors/ultralytics).

## Quick answers

**Is CVE-2026-118618 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-118618 being exploited in the wild.

**How severe is CVE-2026-118618?** High severity, with a CVSS score of 7.8, published 28 October 2026.

**Which products and versions are affected?** Ultralytics Ultralytics.

**Is there a fix for CVE-2026-118618?** No fixed version is recorded yet. Restrict user interaction with the product until a patch is available. Avoid opening untrusted files or visiting untrusted webpages that may trigger the parse_model function. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-118618 attacked?** It is attacked with local access.

**Am I affected by CVE-2026-118618?** Check whether you run Ultralytics. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix


Restrict user interaction with the product until a patch is available. Avoid opening untrusted files or visiting untrusted webpages that may trigger the parse_model function.

## Technical details

The parse_model function in Ultralytics lacks proper validation of user-supplied strings before executing them as Python code, leading to code injection. The vulnerability requires user interaction (visiting a malicious page or opening a malicious file) and executes in the context of the current user. An attacker can leverage this to execute arbitrary code on the affected system.

## Affected products

- Ultralytics Ultralytics

## Timeline

- 2026-06-18: disclosed: Vulnerability reported to vendor
- 2026-10-28: advisory: Coordinated public release of advisory

## References

- [https://www.zerodayinitiative.com/advisories/ZDI-26-817/](https://www.zerodayinitiative.com/advisories/ZDI-26-817/)

## Related threats

- [Ultralytics Google Drive download path traversal remote code execution](https://junglewise.ai/threats/cve-2026-118619-ultralytics-google-drive-download-path-traversal-remote-code)
- [Ultralytics load_dataset_cache_file deserialization of untrusted data](https://junglewise.ai/threats/cve-2026-118617-ultralytics-load-dataset-cache-file-deserialization-of-untrusted)
- [Ultralytics parse_model code injection remote code execution](https://junglewise.ai/threats/cve-2026-118616-ultralytics-parse-model-code-injection-remote-code-execution)
- [Ultralytics torch_safe_load command injection remote code execution](https://junglewise.ai/threats/cve-2026-118615-ultralytics-torch-safe-load-command-injection-remote-code)
- [Ultralytics check_det_dataset code injection remote code execution](https://junglewise.ai/threats/cve-2026-118614-ultralytics-check-det-dataset-code-injection-remote-code)