{"schema":"threatline.record/2","record":{"id":"CVE-2026-100844","aliases":["GHSA-rghg-q7wp-9767","PYSEC-2026-4019"],"summary":"MONAI before 1.6.0 OS Command Injection via dataset_name_or_id","details":"MONAI before 1.6.0 is vulnerable to OS command injection in the nnUNetV2Runner component (monai.apps.nnunet.nnunetv2_runner). User-controlled values taken from the YAML configuration file (notably dataset_name_or_id) and from CLI/kwargs arguments are concatenated into a command string without quoting or validation and then passed to subprocess with shell=True, so shell metacharacters (e.g., ';' on Linux, '&' on Windows) are interpreted. If a victim loads and processes a crafted configuration file — for example by instantiating nnUNetV2Runner with the malicious YAML and invoking a training/validation job such as train_single_model() — arbitrary commands are executed with the privileges of the user running the job.","categories":["Libraries & packages"],"product":"MONAI","vendor":"Project-MONAI","ecosystem":"PyPI","affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100844","source_modified_at":"2026-10-08T15:22:02.046Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"MONAI","vendor":"Project-MONAI","versions":[{"lessThan":"1.6.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"1.6.0","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rghg-q7wp-9767","source_modified_at":"2026-10-01T09:26:04.128653482Z","fetched_at":"2026-10-23T18:55:00.935475Z","package":{"name":"monai","ecosystem":"PyPI","purl":"pkg:pypi/monai"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0"}]}],"versions":["0.0.1","0.1.0","0.2.0","0.3.0","0.4.0","0.5.0","0.5.1","0.5.2","0.5.3","0.6.0","0.7.0","0.8.0","0.8.1","0.9.0","0.9.1","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.3.2","1.3.2rc1","1.3.3rc1","1.4.0","1.4.0rc1","1.4.0rc10","1.4.0rc11","1.4.0rc12","1.4.0rc2","1.4.0rc3","1.4.0rc4","1.4.0rc5","1.4.0rc6","1.4.0rc7","1.4.0rc8","1.4.0rc9","1.4.1rc1","1.5.0","1.5.0rc1","1.5.1","1.5.2","1.5.2rc1"]}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100844","source_modified_at":"2026-10-08T15:22:02.046Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"MONAI","ecosystem":null},"version":"1.6.0","basis":"first unaffected version stated in the CVE record"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-rghg-q7wp-9767","source_modified_at":"2026-10-01T09:26:04.128653482Z","fetched_at":"2026-10-23T18:55:00.935475Z","package":{"name":"monai","ecosystem":"PyPI","purl":"pkg:pypi/monai"},"version":"1.6.0"}],"cvss":8.6,"severity":"High","kev":{"listed":false},"epss":{"probability":0.00767,"percentile":0.55078,"score_date":"2026-10-23"},"published_at":"2026-09-27T01:28:39.672Z","modified_at":"2026-10-08T15:22:02.046Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-100844","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-10-08T15:22:02.046Z"},{"source":"OSV","url":"https://osv.dev/vulnerability/GHSA-rghg-q7wp-9767","fetched_at":"2026-10-23T18:55:00.935475Z","source_modified_at":"2026-10-01T09:26:04.128653482Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-100844","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","OSV","EPSS"],"references":[{"source":"CVE List","url":"https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-rghg-q7wp-9767","tags":["exploit"]},{"source":"CVE List","url":"https://www.vulncheck.com/advisories/monai-before-1.6.0-os-command-injection-via-dataset-name-or-id","tags":["third-party-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"poc","automatable":"no","technical_impact":"total","assessed_at":"2026-09-28T16:39:50.333368Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"ecosystem","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-08T15:22:02.046Z","content_hash":"da21f42cfbabe136620c57e97d9034b8b77ebf3d793d91a1d91dc62d364fab1e"}}