CVE-2026-100843 | Project-MONAI up to 1.5.x monai/auto3dseg/utils.py algo_from_pickle deserialization

September 27, 2026 Yanac

A vulnerability categorized as critical has been discovered in Project-MONAI MONAI up to 1.5.x. This impacts the function algo_from_pickle of the file monai/auto3dseg/utils.py. Executing a manipulation can lead to deserialization.

This vulnerability is tracked as CVE-2026-100843. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More