Description


A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Affected by this issue is the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. Performing a manipulation of the argument imgsz/names/kpt_shape results in code injection. The attack must be initiated from a local position. The project was informed of the problem early through an issue report but has not responded yet.

Related CPE's


Could not find any relations

Weaknesses



CWE-74CWE-94

CVSS impact metrics


CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

5.3 · Medium

Information


Source identifier

[email protected]

Vulnerability status

Deferred

Published

2026-10-13T01:16:42.893Z

13 hours ago

Last modified

2026-10-13T13:29:12.567Z

1 hour ago