CVE WATCH / VULNERABILITY DETAIL
CVE-2026-119578
HIGHCVSS 7.8NVD feed
Published 30 October 2026 · tracked since 31 October 2026
Description
MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg algo_from_json() that allows attackers to run Python code via a crafted work directory's algo_object.json. Attackers can ship a malicious algorithm_templates module plus a _target_ name that is imported and ins
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2015-20130 MEDIUM 6.1
- CVE-2026-111487
- CVE-2010-20125 HIGH 7.5
- CVE-2026-119577 MEDIUM 6.8
- CVE-2026-119572 HIGH 8.7
- CVE-2026-119573 MEDIUM 4.4
- CVE-2026-115683 MEDIUM 6.8
- CVE-2026-112348 MEDIUM 6.5
- CVE-2026-112347 HIGH 7.6
- CVE-2026-118996