High 7.0Published Sep 27, 2026

CVE-2026-100842MONAI through 1.6.0 _get_fake_spatial_shape eval() Sandbox Bypass via Attribute Chains

Updated under an hour ago (2026-10-19 08:23 UTC)

Does this affect you?

It affects Project-MONAI MONAI and 1 other product. Add what you run to find out whether that includes you.

EPSS puts the chance of exploitation in the next 30 days at 0.15%, higher than 4% of scored CVEs.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Project-MONAI MONAI

Exploited in the last 30 days

MONAI through 1.6.0 contains an eval injection vulnerability in _get_fake_spatial_shape() in monai/bundle/scripts.py. The function validates shape expressions with a helper that walks the AST and only collects ast.Name nodes, rejecting any name other than 'p' or 'n', before passing the string to eval(). Expressions built solely from constants and attribute, subscript, or call nodes (for example "(1).__class__.__bases__[0].__subclasses__()" or "int.__class__.__init__.__globals__") contain no ast.Name nodes and therefore bypass the allowlist. Because the shape value originates from bundle metadata consumed by _get_real_input_data and verify_net_in_out (reachable through the bundle 'verify_net_in_out' CLI flow), an attacker who can influence a bundle's metadata can escape the eval sandbox via object introspection chains and achieve code execution in this non-default flow.

CVSS: 7.0 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-95
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): 0.15% (percentile 4)
Assigned by: VulnCheck
NVD analysis: Analyzed
Record last updated: Sep 30, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Project-MONAI MONAI project_monai:monai (from the name)	through 1.6.0	CNA record
project-monai monai project-monai:monai	through 1.6.0	NVD

References

https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-h89g-r5pc-wxfmvendor-advisory, exploit, mitigation
https://www.vulncheck.com/advisories/monai-through-1.6.0-get-fake-spatial-shape-eval-sandbox-bypass-via-attribute-chainsthird-party-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.