CyberRota Analysis
AI-GeneratedVersions of MONAI prior to 1.6.0 are susceptible to a remote code execution vulnerability in the algo_from_pickle() function, stemming from unsafe deserialization of pickle files. This flaw allows attackers to execute arbitrary system commands by crafting malicious pickle files. Organizations using affected MONAI versions should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
MONAI versions before 1.6.0 contain a remote code execution vulnerability in the algo_from_pickle() function due to unsafe pickle.loads() deserialization in monai/auto3dseg/utils.py. Attackers can craft malicious pickle files that execute arbitrary system commands when deserialized by the vulnerable function.
Related CVEs
Other vulnerabilities affecting the same vendor(s)