CVE-2026-108945
5.3MediumPublished 13 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
- Impact
- Limited impact
- Weakness
- CWE-74, CWE-94
Impact
A local attacker with low privileges can execute arbitrary code on the system. They need local access to supply manipulated model parameters to the application.
Root cause
The AutoBackend model loader passes untrusted arguments (imgsz, names, or kpt_shape) directly into Python's eval function.
Affected systems
iMoonLab yolov13 up to commit 73289949533efac82bb5f72ec19b746618656bd2
CVSS v3.1 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Fix & remediation
No fixed version is currently available. As an interim mitigation, restrict local access to the environment and ensure user input is strictly sanitized before reaching AutoBackend in ultralytics/nn/autobackend.py.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Affected by this issue is the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. Performing a manipulation of the argument imgsz/names/kpt_shape results in code injection. The attack must be initiated from a local position. The project was informed of the problem early through an issue report but has not responded yet.