CVE-2026-111237

MEDIUM 5.3

Ultralytics FastSAM AutoBackend Model Loading autobackend.py session.get_modelmeta.custom_metadata_map eval injection

CVSS Score

5.3

EPSS Score

0.0%

EPSS Percentile

0th

A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52. This affects the function session.get_modelmeta.custom_metadata_map of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. This manipulation of the argument imgsz/names/kpt_shape causes improper neutralization of directives in dynamically evaluated code. The attack requires local access. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.

CWE	CWE-95 CWE-94
Vendor	ultralytics
Product	fastsam
Published	Oct 16, 2026

Stay Ahead of the Next One

Get instant alerts for ultralytics fastsam

Be the first to know when new medium vulnerabilities affecting ultralytics fastsam are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

Ultralytics / FastSAM

b4ed20c2fed75eadc5aa7d8b09fedd137b873b52

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/420764 vuldb.com: https://vuldb.com/vuln/420764/cti vuldb.com: https://vuldb.com/cve/CVE-2026-111237 vuldb.com: https://vuldb.com/submit/1004882 github.com: https://github.com/CASIA-LMC-Lab/FastSAM/issues/288

Credits

🔍 Dem00000 (VulDB User) VulDB CNA Team