{"schema":"threatline.record/2","record":{"id":"CVE-2026-100843","aliases":["GHSA-qxq5-qhx6-94qw","PYSEC-2026-4018"],"summary":"MONAI before 1.6.0 Remote Code Execution via algo_from_pickle","details":"MONAI versions before 1.6.0 contain a remote code execution vulnerability in the algo_from_pickle() function due to unsafe pickle.loads() deserialization in monai/auto3dseg/utils.py. Attackers can craft malicious pickle files that execute arbitrary system commands when deserialized by the vulnerable function.","categories":["Libraries & packages"],"product":"MONAI","vendor":"Project-MONAI","ecosystem":"PyPI","affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100843","source_modified_at":"2026-09-30T15:17:39.080Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"MONAI","vendor":"Project-MONAI","versions":[{"version":"0","status":"affected","versionType":"semver","lessThan":"1.6.0"},{"version":"1.6.0","status":"unaffected","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-qxq5-qhx6-94qw","source_modified_at":"2026-10-01T09:25:41.478512480Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"monai","ecosystem":"PyPI","purl":"pkg:pypi/monai"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0"}]}],"versions":["0.0.1","0.1.0","0.2.0","0.3.0","0.4.0","0.5.0","0.5.1","0.5.2","0.5.3","0.6.0","0.7.0","0.8.0","0.8.1","0.9.0","0.9.1","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.3.2","1.3.2rc1","1.3.3rc1","1.4.0","1.4.0rc1","1.4.0rc10","1.4.0rc11","1.4.0rc12","1.4.0rc2","1.4.0rc3","1.4.0rc4","1.4.0rc5","1.4.0rc6","1.4.0rc7","1.4.0rc8","1.4.0rc9","1.4.1rc1","1.5.0","1.5.0rc1","1.5.1","1.5.2","1.5.2rc1"]}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100843","source_modified_at":"2026-09-30T15:17:39.080Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"MONAI","ecosystem":null},"version":"1.6.0","basis":"first unaffected version stated in the CVE record"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-qxq5-qhx6-94qw","source_modified_at":"2026-10-01T09:25:41.478512480Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"monai","ecosystem":"PyPI","purl":"pkg:pypi/monai"},"version":"1.6.0"}],"cvss":8.5,"severity":"High","kev":{"listed":false},"epss":{"probability":0.00196,"percentile":0.08853,"score_date":"2026-10-23"},"published_at":"2026-09-27T01:28:38.803Z","modified_at":"2026-10-01T09:25:41.478512480Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-100843","fetched_at":"2026-10-23T18:52:38.922436Z","source_modified_at":"2026-09-30T15:17:39.080Z"},{"source":"OSV","url":"https://osv.dev/vulnerability/GHSA-qxq5-qhx6-94qw","fetched_at":"2026-10-23T18:52:38.922436Z","source_modified_at":"2026-10-01T09:25:41.478512480Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-100843","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","OSV","EPSS"],"references":[{"source":"CVE List","url":"https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-qxq5-qhx6-94qw","tags":["exploit"]},{"source":"CVE List","url":"https://www.vulncheck.com/advisories/monai-before-1.6.0-remote-code-execution-via-algo-from-pickle","tags":["third-party-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"poc","automatable":"no","technical_impact":"total","assessed_at":"2026-09-30T15:17:12.845348Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"ecosystem","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-01T09:25:41.478512480Z","content_hash":"a1d558a31fc2210dc2993219f9353e7b795df36b66d6c81f45ee2870d182ed07"}}