{"id":"CVE-2026-108945","published":"2026-10-13T01:16:42.893","lastModified":"2026-10-15T16:17:41.583","description":"A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Affected by this issue is the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. Performing a manipulation of the argument imgsz/names/kpt_shape results in code injection. The attack must be initiated from a local position. The project was informed of the problem early through an issue report but has not responded yet.","cvssScore":5.3,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cwes":["CWE-74","CWE-94"],"vendors":[],"products":[],"references":[{"url":"https://github.com/iMoonLab/yolov13/","tags":[]},{"url":"https://github.com/iMoonLab/yolov13/issues/81","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-108945","tags":[]},{"url":"https://vuldb.com/submit/997729","tags":[]},{"url":"https://vuldb.com/vuln/416770","tags":[]},{"url":"https://vuldb.com/vuln/416770/cti","tags":[]}],"exploitRefs":[{"url":"https://github.com/iMoonLab/yolov13/","tags":[]},{"url":"https://github.com/iMoonLab/yolov13/issues/81","tags":[]}],"hasPoc":true,"ai":null}