Critical Remote Code Execution in Ultralytics torch_safe_load (CVE‑2026‑118615)
What It Is — The Zero Day Initiative (ZDI) disclosed a remote code execution (RCE) flaw in Ultralytics’ torch_safe_load function (CVE‑2026‑118615). The vulnerability stems from insufficient validation of a user‑supplied string that is later passed to a system call. An attacker who convinces a victim to open a malicious file or visit a crafted web page can execute arbitrary commands with the privileges of the current user. The advisory lists a CVSS 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) and notes that, as of the publication date, no vendor‑issued fix is available; mitigation is limited to restricting any untrusted interaction with the affected component. The issue was reported to Ultralytics on June 18 2026 and publicly disclosed on October 28 2026.
Affected Products — Ultralytics torch library (any version containing the vulnerable torch_safe_load implementation).
Why It Matters for Trust & Control Assurance — This flaw highlights the importance of a control objective around secure software development and input validation. Demonstrating that such controls are in place and continuously monitored satisfies many framework requirements with a single evidence set.
Recommended Actions
- Apply any vendor‑released patch or upgrade to a version that removes the vulnerable code.
- Until patched, block untrusted files or web content from invoking
torch_safe_load. - Review and harden input‑validation procedures in your CI/CD pipeline; capture the updated policies as audit evidence.
- Enable detailed logging of library calls and monitor for anomalous command‑execution patterns.
Source: ZDI Advisory ZDI‑26‑814