{"data":{"id":"ae60c0c1-38b8-4ee1-ba9b-7a7bb570c94f","title":"CVE-2026-44246: nnU-Net is a semantic segmentation framework that automatically adapts its pipeline to a dataset. Prior to 2.4.1, the…","summary":"CVE-2026-44246 affects nnU-Net, a semantic segmentation framework, before version 2.4.1. Its Issue Triage workflow in .github/workflows/issue-triage.yml sets allowed_non_write_users to the issue author's login, so any logged-in GitHub user who opens an issue can reach the workflow. Untrusted issue title and body text is embedded directly into the prompt of anthropics/claude-code-action, which runs a command-capable Claude agent that can comment on and relabel the issue via gh, and the workflow triggers automatically on issues.opened. An external attacker can therefore submit a crafted issue that steers the agent beyond issue triage and influences authenticated issue actions.","solution":"Fixed in 2.4.1.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-44246","publishedAt":"2026-05-12T21:16:16.543Z","cveId":"CVE-2026-44246","cweIds":null,"cvssScore":"7.2","cvssSeverity":"high","severity":"high","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["nnU-Net","anthropics/claude-code-action","Claude"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"nnU-Net issue triage workflow prompt injection via crafted GitHub issue","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.0029,"epssCheckedAt":"2026-10-14T12:12:43.428Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-10T03:48:24.499Z","patchAvailable":null,"disclosureDate":"2026-05-12T21:16:16.543Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity","confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0051"]}}