CVE-2026-115726

The AI coding tool Aider (versions through 0.86.2) is vulnerable to command execution via the repository-level .aider.conf.yml file. The root cause is the automatic loading of this configuration file without a trust prompt. Attackers who can commit a malicious .aider.conf.yml can set notification...

CVE-2026-5059-poc

Where is CVE-2026-5059 in the code? The vulnerability is in two files working together: File 1: tools.py — The Root Cause The old version used shell=True in executepipedcommand: python OLD VULNERABLE CODE process = subprocess.run command, ← raw string passed to shell shell=True, ← THIS is the...

PT-2026-114078

Name of the Vulnerable Software and Affected Versions pypdftk versions prior to 0.6 Description An OS command injection issue exists in the fill form, dump data fields, and pdftk cmd util functions. The software constructs shell commands using paths provided by the caller. An attacker who can...

PYSEC-2026-4019

MONAI before 1.6.0 is vulnerable to OS command injection in the nnUNetV2Runner component monai.apps.nnunet.nnunetv2runner. User-controlled values taken from the YAML configuration file notably datasetnameorid and from CLI/kwargs arguments are concatenated into a command string without quoting or...

PYSEC-2026-4019

MONAI before 1.6.0 is vulnerable to OS command injection in the nnUNetV2Runner component monai.apps.nnunet.nnunetv2runner. User-controlled values taken from the YAML configuration file notably datasetnameorid and from CLI/kwargs arguments are concatenated into a command string without quoting or...

CVE-2026-100844

MONAI before 1.6.0 is vulnerable to OS command injection in the nnUNetV2Runner component monai.apps.nnunet.nnunetv2runner. User-controlled values taken from the YAML configuration file notably datasetnameorid and from CLI/kwargs arguments are concatenated into a command string without quoting or...

CVE-2026-100844 MONAI before 1.6.0 OS Command Injection via dataset_name_or_id

MONAI before 1.6.0 is vulnerable to OS command injection in the nnUNetV2Runner component monai.apps.nnunet.nnunetv2runner. User-controlled values taken from the YAML configuration file notably datasetnameorid and from CLI/kwargs arguments are concatenated into a command string without quoting or...

EUVD-2026-87844

MONAI before 1.6.0 is vulnerable to OS command injection in the nnUNetV2Runner component monai.apps.nnunet.nnunetv2runner. User-controlled values taken from the YAML configuration file notably datasetnameorid and from CLI/kwargs arguments are concatenated into a command string without quoting or...

CVE-2026-100844 MONAI before 1.6.0 OS Command Injection via dataset_name_or_id

MONAI before 1.6.0 is vulnerable to OS command injection in the nnUNetV2Runner component monai.apps.nnunet.nnunetv2runner. User-controlled values taken from the YAML configuration file notably datasetnameorid and from CLI/kwargs arguments are concatenated into a command string without quoting or...

CVE-2026-100844

MONAI versions prior to 1.6.0 are vulnerable to an OS command injection flaw within the nnUNetV2Runner component (monai.apps.nnunet.nnunetv2_runner). The root cause is the insecure concatenation of user-controlled values from YAML configuration files (specifically dataset_name_or_id) and CLI/kwar...

CVE-2026-100844: Improper Neutralization of Special Elements used in an OS Command

MONAI before 1.6.0 is vulnerable to OS command injection in the nnUNetV2Runner component monai.apps.nnunet.nnunetv2runner. User-controlled values taken from the YAML configuration file notably datasetnameorid and from CLI/kwargs arguments are concatenated into a command string without quoting or...

CVE-2026-5059-poc

¿Dónde está CVE-2026-5059 en el código? La vulnerabilidad está en dos archivos que trabajan juntos: Archivo 1: tools.py — La causa raíz La versión antigua usaba shell=True en executepipedcommand: root@kitploit: CÓDIGO ANTIGUO VULNERABLE process = subprocess.run command, ← cadena sin procesar pasa...

PT-2026-85567

Name of the Vulnerable Software and Affected Versions aider versions 0 through 0.86.2 Description The software automatically loads a .aider.conf.yml configuration file from the root of the git repository where it is launched. An attacker can craft a repository containing a malicious configuration...

WS-2026-0033

MONAI is vulnerable to OS command injection in monai/apps/nnunet/nnunetv2runner.py. The runner concatenates user-controlled values from a configuration YAML datasetnameorid or CLI kwargs into a command string without quoting or validation, and the string is passed to subprocess with shell=True, s...

MONAI vulnerable to OS command injection

Comment from JPCERT/CC We are submitting the report again as we have yet to receive any responses from you after submitting it on February 5 and March 11. It would be greatly appreciated if you could send us a message after confirming it so that we can follow up the case by email. Summary MONAI...

GHSA-RGHG-Q7WP-9767 MONAI vulnerable to OS command injection

Comment from JPCERT/CC We are submitting the report again as we have yet to receive any responses from you after submitting it on February 5 and March 11. It would be greatly appreciated if you could send us a message after confirming it so that we can follow up the case by email. Summary MONAI...

PT-2026-83383

Comment from JPCERT/CC We are submitting the report again as we have yet to receive any responses from you after submitting it on February 5 and March 11. It would be greatly appreciated if you could send us a message after confirming it so that we can follow up the case by email. Summary MONAI...

PT-2026-99464

Name of the Vulnerable Software and Affected Versions MONAI versions prior to 1.6.0 Description OS command injection is possible in the nnUNetV2Runner component monai.apps.nnunet.nnunetv2 runner. User-controlled values from CLI/kwargs arguments and YAML configuration files, specifically the datas...

EUVD-2026-58478

AgenticSeek commit fc242c7 contains an unauthenticated remote code execution vulnerability that allows any network-adjacent attacker to execute arbitrary commands by submitting crafted queries to the unprotected POST /query API endpoint bound to 0.0.0.0:7777 with wildcard CORS. Attackers can send...

CVE-2026-72776

AgenticSeek commit fc242c7 contains an unauthenticated remote code execution vulnerability that allows any network-adjacent attacker to execute arbitrary commands by submitting crafted queries to the unprotected POST /query API endpoint bound to 0.0.0.0:7777 with wildcard CORS. Attackers can send...