https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:35:30 +0000 https://vulnerability.circl.lu/vuln/cve-2026-100842 <p><strong>Affected:</strong> Project-MONAI MONAI</p> <p>MONAI through 1.6.0 contains an eval injection vulnerability in _get_fake_spatial_shape() in monai/bundle/scripts.py. The function validates shape expressions with a helper that walks the AST and only collects ast.Name nodes, rejecting any name other than &#39;p&#39; or &#39;n&#39;, before passing the string to eval(). Expressions built solely from constants and attribute, subscript, or call nodes (for example &#34;(1).__class__.__bases__[0].__subclasses__()&#34; or &#34;int.__class__.__init__.__globals__&#34;) contain no ast.Name nodes and therefore bypass the allowlist. Because the shape value originates from bundle metadata consumed by _get_real_input_data and verify_net_in_out (reachable through the bundle &#39;verify_net_in_out&#39; CLI flow), an attacker who can influence a bundle&#39;s metadata can escape the eval sandbox via object introspection chains and achieve code execution in this non-default flow.</p> <p><strong>Affected:</strong> Project-MONAI MONAI</p> <p>MONAI through 1.6.0 contains an eval injection vulnerability in _get_fake_spatial_shape() in monai/bundle/scripts.py. The function validates shape expressions with a helper that walks the AST and only collects ast.Name nodes, rejecting any name other than &#39;p&#39; or &#39;n&#39;, before passing the string to eval(). Expressions built solely from constants and attribute, subscript, or call nodes (for example &#34;(1).__class__.__bases__[0].__subclasses__()&#34; or &#34;int.__class__.__init__.__globals__&#34;) contain no ast.Name nodes and therefore bypass the allowlist. Because the shape value originates from bundle metadata consumed by _get_real_input_data and verify_net_in_out (reachable through the bundle &#39;verify_net_in_out&#39; CLI flow), an attacker who can influence a bundle&#39;s metadata can escape the eval sandbox via object introspection chains and achieve code execution in this non-default flow.</p> https://vulnerability.circl.lu/vuln/cve-2026-100842