Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:monai:monai:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Remote Code Execution in MONAI Bundle Configuration Engine

MONAI versions through 1.6.0 are vulnerable to remote code execution due to insecure deserialization and evaluation of arbitrary Python callables within bundle configuration files.

MONAI +3 remote-code-execution python supply-chain vulnerability deserialization rce code-execution ml-ops +1
2t 1c