Description
MONAI versions before 1.6.0 contain a remote code execution vulnerability in the algo_from_pickle() function due to unsafe pickle.loads() deserialization in monai/auto3dseg/utils.py. Attackers can craft malicious pickle files that execute arbitrary system commands when deserialized by the vulnerable function.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Project-MONAI | MONAI | < 1.6.0 | 1.6.0 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | monai | < 1.6.0 | 1.6.0 | GHSA-qxq5-qhx6-94qw |
References
- GitHub Security Advisory (GHSA-qxq5-qhx6-94qw) vendor-advisory
- VulnCheck Advisory: MONAI before 1.6.0 Remote Code Execution via algo_from_pickle third-party-advisory