MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)

Summary An unauthenticated remote attacker can crash a running MONAILabel server or silently corrupt its medical AI inference results by uploading a single crafted DICOM file 132 KB via the REST API. The vulnerability stems from pydicom's lack of validation for Decimal String DS and Integer Strin...

GHSA-6HP3-VR39-RQW8 MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)

Summary An unauthenticated remote attacker can crash a running MONAILabel server or silently corrupt its medical AI inference results by uploading a single crafted DICOM file 132 KB via the REST API. The vulnerability stems from pydicom's lack of validation for Decimal String DS and Integer Strin...