---
id: "CVE-2026-119578"
kind: "vulnerability"
aliases: ["CVE-2026-119578"]
title: "MONAI: crafted work directory lets attackers run Python code"
severity: "high"
cvss: 8.5
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["medical-imaging", "ml-pipelines", "monai", "package", "python"]
not_affected_if: ["auto3dseg-unused", "trusted-work-directories-only"]
published_at: "2026-10-30T14:16:47+00:00"
first_seen_at: "2026-10-30T14:30:54+00:00"
updated_at: "2026-10-30T14:32:32+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119578", "first_seen_at": "2026-10-30T14:30:54+00:00"}]
---

# MONAI: crafted work directory lets attackers run Python code

MONAI versions 1.6.0 before 1.6.1 load a crafted algo_object.json from a work directory in Auto3DSeg, which imports and instantiates an attacker-supplied module. An attacker who gets a malicious work directory to a victim can run Python code on the victim's machine.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed MONAI version with `pip show monai` and see whether it is `1.6.0` through `1.6.0`-range releases before `1.6.1`.
- Look for use of `AutoRunner` or `import_bundle_algo_history` in your code or pipelines, since these trigger the load.

## Fix

- MONAI: move to `1.6.1` or later.

## Timeline

- 2026-10-30T14:30:54+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-119578

## From the sources

MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg algo_from_json() that allows attackers to run Python code via a crafted work directory's algo_object.json. Attackers can ship a malicious algorithm_templates module plus a _target_ name that is imported and instantiated when victims call AutoRunner or import_bundle_algo_history, executing code under default configuration.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_