CVE-2026-118619 is a path traversal vulnerability in Ultralytics' handling of Google Drive downloads. It allows remote attackers to execute arbitrary code by supplying a crafted path that is not properly validated before file operations. Exploitation requires user interaction, such as visiting a malicious page or opening a malicious file. The vulnerability has a high severity score of 8.8 CVSS v3.0.