MajorCritical vulnerability

CVE-2026-100843 (CVSS 8.5)

NVD · officialPublished Sep 27, 2026Risk 37/100

MONAI versions before 1.6.0 contain a remote code execution vulnerability in the algo_from_pickle() function due to unsafe pickle.loads() deserialization in monai/auto3dseg/utils.py. Attackers can craft malicious pickle files that execute arbitrary system commands when deserialized by the vulnerable function.

Technical details

CVSS

8.5

AV:LocalAC:LowPR:NoneUI:Passive

Evidence and sources

This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.

Open primary source