Skip to content

CVE record · 1 source

CVE-2026-119578

CVSS 7.8

MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg algo_from_json() that allows attackers to run Python code…

Vendor: Project-MONAI
Product: MONAI
CVSS v3.1: 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS: 0.006 (p46)
Weakness: CWE-470

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

31

CVE NVD 42h ago

MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg algo_from_json() that allows attackers to run Python code…

MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg algo_from_json() that allows attackers to run Python code via a crafted work directory's algo_object.json. Attackers can ship a malicious…

PoC public CVSS 7.8 CVE-2026-119578 Project-MONAI