CVE-2026-118613 is a high-severity vulnerability in Ultralytics' torch_load function that allows remote code execution via deserialization of untrusted data. Exploitation requires user interaction, such as visiting a malicious page or opening a malicious file. The flaw arises from improper validation of user-supplied data, enabling attackers to execute arbitrary code with the current user's privileges.