Monai Before 1.6.0 Os Command Injection Via Dataset Name Or Id

Back www.vulncheck.com

Monai Before 1.6.0 Os Command Injection Via Dataset Name Or Id

www.vulncheck.com • September 27, 2026

Share: View original

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

GitHub Security Advisory (GHSA-rghg-q7wp-9767)

Ready to get Started?

Vulnerability Prioritization Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.

Early Warning System Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple MONAI Vulnerabilities Lead to Remote Code Execution Risks A series of vulnerabilities affecting MONAI versions prior to 1.6.0 have been disclosed, allowing for remote code execution (RCE) through various attack vectors including OS command injection and pickle deserialization. The vulnerabilities include CVE-2026-1234, CVE-2026-1235, and CVE-2026-1236, impacting users who utilize MONAI for medical imaging and AI applications. Attackers can exploit these vulnerabilities via specially crafted dataset names, attribute chains, or configuration files. The affected versions are MONAI 1.5.2 and earlier, with the latest version 1.6.0 addressing some of these issues. Security advisories have been issued, urging immediate updates to mitigate risks. The scope of impact is significant, given MONAI's use in healthcare and research environments. Current status indicates that exploitation is possible, with proof-of-concept code available for some vulnerabilities. 65

Extracted Entities

CWE Weaknesses (1)

CWE-78 - OS Command Injection

MITRE ATT&CK (1)

T1059 - Command and Scripting Interpreter

Vulnerabilities (1)

OS Command Injection