CVE-2026-100846 | Project-MONAI up to 1.5.1 monai/auto3dseg/utils.py algo_from_pickle deserialization

September 27, 2026 Yanac

A vulnerability identified as problematic has been detected in Project-MONAI MONAI up to 1.5.1. Affected is the function algo_from_pickle of the file monai/auto3dseg/utils.py. The manipulation leads to deserialization.

This vulnerability is listed as CVE-2026-100846. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More