CVE-2026-119578

MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg algofromjson that allows attackers to run Python code via a crafted work directory's algoobject.json. Attackers can ship a malicious algorithmtemplates module plus a target name that is imported and...

EUVD-2026-113932

MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg algofromjson that allows attackers to run Python code via a crafted work directory's algoobject.json. Attackers can ship a malicious algorithmtemplates module plus a target name that is imported and...

CVE-2026-119578 MONAI 1.6.0 before 1.6.1 Code Execution via Auto3DSeg algo_from_json()

MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg algofromjson that allows attackers to run Python code via a crafted work directory's algoobject.json. Attackers can ship a malicious algorithmtemplates module plus a target name that is imported and...

CVE-2026-119578

Versions 1.6.0 before 1.6.1 of MONAI are vulnerable to Remote Code Execution within the Auto3DSeg algo_from_json() function. The root cause is Unsafe Reflection (CWE-470), where a crafted algo_object.json in a work directory can cause the system to import and instantiate a malicious algorithm_tem...

CVE-2026-119578 MONAI 1.6.0 before 1.6.1 Code Execution via Auto3DSeg algo_from_json()

MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg algofromjson that allows attackers to run Python code via a crafted work directory's algoobject.json. Attackers can ship a malicious algorithmtemplates module plus a target name that is imported and...