CVE-2026-111991: WongKinYiu yolov9 ONNX Metadata common.py DetectMultiBackend.__init__ code injection
A security vulnerability has been detected in WongKinYiu yolov9 0.1. This vulnerability affects the function DetectMultiBackend.init of the file models/common.py of the component ONNX Metadata Handler. The manipulation of the argument names/stride leads to code injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What must an attacker control to exploit this issue?
The attacker needs to manipulate the ONNX metadata arguments named names and/or stride processed by DetectMultiBackend.__init__ in models/common.py. Exploitation is described as remote and requires user interaction.
How urgent is remediation?
The vulnerability is rated medium severity with a CVSS score of 6.3, but a public exploit has been disclosed and may be used. The project had been notified through an issue report and had not responded at the time of publication.
Which versions are known to be affected?
The reported affected version is WongKinYiu yolov9 0.1. No fixed version or vendor patch is identified in the available information.