MONAI before 1.6.0 is vulnerable to OS command injection in the nnUNetV2Runner component (monai.apps.nnunet.nnunetv2_runner). (CVE-2026-100844)
MONAI versions prior to 1.6.0 contain an OS command injection vulnerability in the nnUNetV2Runner component. This occurs because user-controlled inputs from YAML configuration files and CLI/kwargs arguments are concatenated into shell commands without proper quoting or validation. An attacker who can supply a crafted configuration file can execute arbitrary commands with the privileges of the user running the MONAI job.
AI Analysis
Technical Summary
MONAI before version 1.6.0 is vulnerable to OS command injection in the monai.apps.nnunet.nnunetv2_runner component. The vulnerability arises from concatenating user-controlled values from YAML configuration files (such as dataset_name_or_id) and CLI/kwargs arguments into a command string that is passed to subprocess with shell=True, without proper quoting or validation. This allows shell metacharacters to be interpreted, leading to arbitrary command execution if a malicious configuration file is loaded and processed, for example by invoking train_single_model().
Potential Impact
Successful exploitation allows an attacker to execute arbitrary OS commands with the privileges of the user running the MONAI process. This can lead to full compromise of the affected system, including data theft, system modification, or further attacks. The CVSS score is 8.4 (high severity), indicating significant confidentiality, integrity, and availability impacts.
Mitigation Recommendations
A fix is available in MONAI version 1.6.0 and later. Users should upgrade to version 1.6.0 or newer to remediate this vulnerability. Until upgrading, avoid loading untrusted YAML configuration files or running MONAI jobs with untrusted inputs that could be crafted to exploit this issue.
MONAI before 1.6.0 is vulnerable to OS command injection in the nnUNetV2Runner component (monai.apps.nnunet.nnunetv2_runner). (CVE-2026-100844)
Description
MONAI versions prior to 1.6.0 contain an OS command injection vulnerability in the nnUNetV2Runner component. This occurs because user-controlled inputs from YAML configuration files and CLI/kwargs arguments are concatenated into shell commands without proper quoting or validation. An attacker who can supply a crafted configuration file can execute arbitrary commands with the privileges of the user running the MONAI job.
CVSS v3.1
Score 8.4high
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
MONAI before version 1.6.0 is vulnerable to OS command injection in the monai.apps.nnunet.nnunetv2_runner component. The vulnerability arises from concatenating user-controlled values from YAML configuration files (such as dataset_name_or_id) and CLI/kwargs arguments into a command string that is passed to subprocess with shell=True, without proper quoting or validation. This allows shell metacharacters to be interpreted, leading to arbitrary command execution if a malicious configuration file is loaded and processed, for example by invoking train_single_model().
Potential Impact
Successful exploitation allows an attacker to execute arbitrary OS commands with the privileges of the user running the MONAI process. This can lead to full compromise of the affected system, including data theft, system modification, or further attacks. The CVSS score is 8.4 (high severity), indicating significant confidentiality, integrity, and availability impacts.
Mitigation Recommendations
A fix is available in MONAI version 1.6.0 and later. Users should upgrade to version 1.6.0 or newer to remediate this vulnerability. Until upgrading, avoid loading untrusted YAML configuration files or running MONAI jobs with untrusted inputs that could be crafted to exploit this issue.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-x7wh-49x3-6748
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-100844"]
- Database Specific Severity
- HIGH
- Cvss Version
- 3.1
Threat ID: 6ab89bbdf7a7c54106941eac
Added to database: 09/27/2026, 04:29:49 UTC
Last enriched: 09/27/2026, 04:35:49 UTC
Last updated: 09/27/2026, 04:35:49 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.