CVE-2026-111237: Improper Neutralization of Directives in Dynamically Evaluated Code in Ultralytics FastSAM

This vulnerability in Ultralytics FastSAM up to commit b4ed20c2fed75eadc5aa7d8b09fedd137b873b52 affects the function session.get_modelmeta.custom_metadata_map within ultralytics/nn/autobackend.py. Improper neutralization of directives occurs in dynamically evaluated code when the arguments imgsz, names, or kpt_shape are manipulated. Exploitation requires local access. The product's rolling release model means no fixed version numbers are available. The vendor has not yet responded to the issue report, and no patch information is currently available.

An attacker with local access can manipulate inputs to cause improper neutralization of directives in dynamically evaluated code, potentially leading to code injection or execution issues. The CVSS score of 4.8 indicates a medium impact with low attack complexity and privileges required. There is no evidence of known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded yet and no patch links are available, users should monitor official Ultralytics channels for updates. Restrict local access to trusted users to reduce risk until a fix is available.