Product

MONAI (< 1.5.2)

1 brief RSS

Remote Code Execution in MONAI Bundle Configuration Engine

MONAI versions through 1.6.0 are vulnerable to remote code execution due to insecure deserialization and evaluation of arbitrary Python callables within bundle configuration files.

MONAI +3 remote-code-execution python supply-chain vulnerability deserialization rce code-execution ml-ops +1

2t 1c 7m ago