CVE-2026-100843

Summary

MONAI versions before 1.6.0 contain a remote code execution vulnerability in the algo_from_pickle() function due to unsafe pickle.loads() deserialization in monai/auto3dseg/utils.py. Attackers can craft malicious pickle files that execute arbitrary system commands when deserialized by the vulnerable function.

Affected Software

VendorProductVersion RangeStatus
Project-MONAIMONAI0 < 1.6.0affected
Project-MONAIMONAI1.6.0unaffected

Weaknesses

  • CWE-502: Deserialization of Untrusted Data

References