Live › vulnerability › CVE-2026-119578
MONAI versions 1.6.0 before 1.6.1 load a crafted algo_object.json from a work directory in Auto3DSeg, which imports and instantiates an attacker-supplied module. An attacker who gets a malicious work directory to a victim can run Python code on the victim's machine.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 14:30 UTC. All times on this page are UTC.
Teams that use MONAI's Auto3DSeg features (AutoRunner or import_bundle_algo_history) on work directories they did not create themselves are exposed under default configuration. Projects that do not use Auto3DSeg, or only process work directories they generated, can skip it.
No product ranges from the sources yet.
pip show monai and see whether it is 1.6.0 through 1.6.0-range releases before 1.6.1.AutoRunner or import_bundle_algo_history in your code or pipelines, since these trigger the load.1.6.1 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg algo_from_json() that allows attackers to run Python code via a crafted work directory's algo_object.json. Attackers can ship a malicious algorithm_templates module plus a target name that is imported and instantiated when victims call AutoRunner or import_bundle_algo_history, executing code under default configuration.
This page as .md · .json · in your agent: get_signal("CVE-2026-119578")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.