CVE-2026-100842

Name of the Vulnerable Software and Affected Versions MONAI versions prior to 1.6.1

Description An eval injection exists in the get fake spatial shape() function within monai/bundle/scripts.py. The function uses a helper to validate shape expressions by walking the Abstract Syntax Tree (AST) and only allowing ast.Name nodes named p or n before passing the string to eval(). However, expressions composed exclusively of constants, attributes, subscripts, or call nodes can bypass this allowlist because they contain no ast.Name nodes. Since the shape value is derived from bundle metadata used by get real input data and verify net in out (accessible via the verify net in out CLI flow), an attacker capable of influencing bundle metadata can use object introspection chains to escape the sandbox and execute arbitrary code.

Recommendations Update to version 1.6.1 or later.