early signals ZDI published infra

ZDI-26-818: (0Day) Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability

// AI summary

Ultralytics has a ZDI-26-818 path traversal vulnerability allowing remote code execution, requiring user interaction via a malicious page or file visit.

// from the source

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8.