Threats tagged 'ghsa-j8p7-jccj-5wpx'

CVE-2026-111865 is a medium-severity vulnerability in THU-MIG yoloe affecting the eval function in ultralytics/nn/autobackend.py. It involves improper neutralization of directives in dynamically evaluated code due to manipulation of certain arguments. The attack requires local access. No versioning is used by the product, so affected versions cannot be precisely identified. The vendor has not responded to the issue report, and no patch or fix is currently available. Public exploit code exists but there are no known exploits in the wild.