GHSA-qxq5-qhx6-94qw: Incomplete Fix in MONAI: algo_from_pickle() pickle.loads() RCE still present in v1.5.2 despite GHSA-89gg-p5r5-q6r4 claiming patch
Summary
MONAI version 1.5.2 still contains a critical remote code execution (RCE) vulnerability in the `algo_from_pickle()` function, despite an earlier security advisory claiming it was patched. The vulnerable code uses `pickle.loads()` (a function that converts serialized Python objects back into code, which can execute malicious instructions) without any safety checks, allowing an attacker to run arbitrary commands if they provide a specially crafted file to the function.
Classification
Affected Vendors
Affected Packages
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2024-37052: Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling
Original source: https://github.com/advisories/GHSA-qxq5-qhx6-94qw
First tracked: August 18, 2026 at 08:01 PM
Classified by LLM (prompt v3) · confidence: 95%