CVE-2026-100844 | Project-MONAI up to 1.5.x nnUNetV2Runner nnunetv2_runner.py train_single_model dataset_name_or_id os command injection

A vulnerability labeled as problematic has been found in Project-MONAI MONAI up to 1.5.x. Affected by this vulnerability is the function train_single_model of the file monai/apps/nnunet/nnunetv2_runner.py of the component nnUNetV2Runner. The manipulation of the argument dataset_name_or_id results in os command injection.

This vulnerability is cataloged as CVE-2026-100844. The attack must be initiated from a local position. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More