CVE-2026-111991 WongKinYiu yolov9 ONNX Metadata common.py DetectMultiBackend.__init__ code injection
Attackers can execute arbitrary code via manipulated ONNX metadata in the yolov9 library, requiring immediate attention from users of this object detection tool.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-111991?
CVE-2026-111991 is a medium-severity code injection vulnerability in WongKinYiu yolov9, published on 18 Oct 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A security vulnerability has been detected in WongKinYiu yolov9 0.1. This vulnerability affects the function DetectMultiBackend.__init__ of the file models/common.py of the component ONNX Metadata Handler. The manipulation of the argument names/stride leads to code injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Which versions are affected by CVE-2026-111991?
How do I fix CVE-2026-111991?
No fix has been published for CVE-2026-111991 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2026-111991 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-111991 exists.
Sources
Also known as GHSA-fj9f-3w9g-75gj.