{"data":{"id":"f846251c-20d9-4339-884f-0f66d8935d5a","title":"CVE-2026-111991: A security vulnerability has been detected in WongKinYiu yolov9 0.1. This vulnerability affects the function…","summary":"A security vulnerability in WongKinYiu yolov9 0.1 affects the DetectMultiBackend.__init__ function in models/common.py, within the ONNX Metadata Handler component. Manipulating the names/stride argument leads to code injection, and the attack can be exploited remotely. The exploit is publicly disclosed, and the project was notified through an issue report but has not yet responded.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-111991","publishedAt":"2026-10-18T15:16:52.853Z","cveId":"CVE-2026-111991","cweIds":["CWE-74","CWE-94"],"cvssScore":"6.3","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["YOLOv9 (WongKinYiu yolov9 0.1)"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"WongKinYiu yolov9 code injection via ONNX Metadata Handler","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-18T18:09:27.880Z","kevDateAdded":null,"advisoryAliases":["GHSA-fj9f-3w9g-75gj"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-18T18:09:30.912Z","patchAvailable":null,"disclosureDate":"2026-10-18T15:16:52.853Z","capecIds":["CAPEC-242"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}