CVE-2026-118614 is a code injection vulnerability in the check_det_dataset function of Ultralytics software. It allows remote attackers to execute arbitrary Python code by supplying malicious input that is not properly validated. Exploitation requires user interaction, such as visiting a malicious page or opening a malicious file. The vulnerability can lead to full compromise of the affected system under the current user context.