CVE-2026-111991 | WongKinYiu yolov9 0.1 ONNX Metadata models/common.py DetectMultiBackend.__init__ names/stride code injection (Issue 670)

SecurityVulns
Yanac

A vulnerability has been found in WongKinYiu yolov9 0.1 and classified as critical. This vulnerability affects the function DetectMultiBackend.__init__ of the file models/common.py of the component ONNX Metadata Handler. The manipulation of the argument names/stride leads to code injection.

This vulnerability is referenced as CVE-2026-111991. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More