PT-2026-133547

MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg algo from json that allows attackers to run Python code via a crafted work directory's algo object.json. Attackers can ship a malicious algorithm templates module plus a target name that is imported and...