CVE-2026-100843: MONAI before 1.6.0 Remote Code Execution via algo_from_pickle
MONAI versions before 1.6.0 contain a remote code execution vulnerability in the algofrompickle() function due to unsafe pickle.loads() deserialization in monai/auto3dseg/utils.py. Attackers can craft malicious pickle files that execute arbitrary system commands when deserialized by the vulnerable function.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
MONAIto a version that resolves this vulnerability.Fixed in 1.6.0
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Deployments using MONAI versions earlier than 1.6.0 are affected if they deserialize pickle data through the algo_from_pickle() function.
What does an attacker need to exploit it?
An attacker needs to cause a crafted malicious pickle file to be passed to algo_from_pickle(). Exploitation occurs when the vulnerable function deserializes that file.
What is the impact of successful exploitation?
A malicious pickle can execute arbitrary system commands in the context of the process running the vulnerable MONAI code.
What should be done if the affected function is in use?
Upgrade MONAI to version 1.6.0 or later. Until upgrading, do not pass pickle files from untrusted sources to algo_from_pickle().