CVE-2026-111237

A vulnerability exists in Ultralytics FastSAM (up to commit b4ed20c2fed75eadc5aa7d8b09fedd137b873b52) within the AutoBackend Model Loading component. Specifically, the function session.get_modelmeta.custom_metadata_map in ultralytics/nn/autobackend.py is susceptible to an eval injection (CWE-95, ...