CVE-2026-119578
Deferred Deferred - Pending Action

Remote Code Execution in MONAI Auto3DSeg

Publication date: 2026-10-30

Last updated on: 2026-10-30

Assigner: VulnCheck

Description
MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg algo_from_json() that allows attackers to run Python code via a crafted work directory's algo_object.json. Attackers can ship a malicious algorithm_templates module plus a _target_ name that is imported and instantiated when victims call AutoRunner or import_bundle_algo_history, executing code under default configuration.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-30
Last Modified
2026-10-30
Generated
2026-10-30
AI Q&A
2026-10-30
EPSS Evaluated
N/A
NVD
CVE-2026-119578
EUVD
EUVD-2026-113932

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Project-MONAI MONAI 1.6.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-470 The product uses external input with reflection to select which classes or code to use, but it does not sufficiently prevent the input from selecting improper classes or code.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

MONAI versions from 1.6.0 to 1.6.1 have a remote code execution flaw in the Auto3DSeg algo_from_json() function. Attackers can exploit this by placing a malicious algo_object.json file in a crafted work directory. When victims use AutoRunner or import_bundle_algo_history, the system imports and runs the malicious code due to improper handling of the _target_ field.

Detection Guidance

Check for the presence of MONAI versions between 1.6.0 and 1.6.1 by inspecting installed packages. Look for unusual files named algo_object.json in work directories or bundles. Monitor for unexpected Python code execution or imports of malicious algorithm_templates modules.

Impact Analysis

If you use MONAI 1.6.0 or 1.6.1, attackers could execute arbitrary Python code on your system. This could lead to data theft, system compromise, or unauthorized access to sensitive information. The attack requires victim interaction, such as running AutoRunner or importing a bundle.

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating GDPR's integrity and confidentiality principles or HIPAA's safeguards for protected health information. Organizations using affected MONAI versions may face compliance breaches, legal penalties, and reputational damage.

Mitigation Strategies

Upgrade MONAI to version 1.6.1 or later immediately. Remove any untrusted algorithm_templates modules or work directories containing algo_object.json files. Restrict write permissions to directories where MONAI operates to prevent unauthorized file creation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-119578. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart