CVE-2026-100846
HIGHCVSS 7.6Description
MONAI before 1.5.2 contains a deserialization of untrusted data vulnerability in the algo_from_pickle function in monai/auto3dseg/utils.py. The function reads a .pkl file and passes its contents to pickle.loads without validating the data source or content. If an application invokes algo_from_pickle on an attacker-supplied pickle file, an object defining __reduce__ is executed during deserialization, resulting in arbitrary code execution in the context of the application.
Timeline
Published:September 27th, 2026 2:17 AM
Last modified:September 30th, 2026 5:44 PM
CVSS Scoring
CVSS v3: 7.6 (HIGH)
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
Affected Software
From NVD CPE configuration data
Vendors
project-monai
Products
monai
Weaknesses (CWE)
References & Reports
Advisories, patches, and third-party reports
Source: NIST NVD · Data may lag official sources by up to one minute