Reference page — cumulative record through Saturday, October 3, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2026-100842

CVE-2026-100842HIGH

Project-MONAI MONAI — MONAI through 1.6.0 _get_fake_spatial_shape eval() Sandbox Bypass via Attribute Chains

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   L   H   P   L   N   H   H   H    7.3   .0015    3.4     —

AFFECTED
  Product  Versions     Fixed
  MONAI    unspecified  —

TIMELINE
  Sep 26  Reserved by VulnCheck
  Sep 27  Published (CNA: VulnCheck)
  Sep 30  EXPLOIT PUBLISHED — CVE-2026-100842 (Project-MONAI MONAI). Public exploit reference added.

CWE-95 · CNA: VulnCheck · CVSS v4.0 · 2 references · NVD status: Analyzed

Description

MONAI through 1.6.0 contains an eval injection vulnerability in _get_fake_spatial_shape() in monai/bundle/scripts.py. The function validates shape expressions with a helper that walks the AST and only collects ast.Name nodes, rejecting any name other than 'p' or 'n', before passing the string to eval(). Expressions built solely from constants and attribute, subscript, or call nodes (for example "(1).__class__.__bases__[0].__subclasses__()" or "int.__class__.__init__.__globals__") contain no ast.Name nodes and therefore bypass the allowlist. Because the shape value originates from bundle metadata consumed by _get_real_input_data and verify_net_in_out (reachable through the bundle 'verify_net_in_out' CLI flow), an attacker who can influence a bundle's metadata can escape the eval sandbox via object introspection chains and achieve code execution in this non-default flow.

Lifecycle

Complete event history — 3 events, chronological
Date	Event	Detail
September 26, 2026	Reserved	Reserved by VulnCheck
September 27, 2026	Published	Published (CNA: VulnCheck)
September 30, 2026	EXPLOIT PUBLISHED	EXPLOIT PUBLISHED — CVE-2026-100842 (Project-MONAI MONAI). Public exploit reference added.

Affected

Affected products and packages — 1 row
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
Project-MONAI	MONAI	—	—	—

Weaknesses

CWE-95

References (2)

https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-h89g-r5pc-wxfm [Exploit, Mitigation, Vendor Advisory]
https://www.vulncheck.com/advisories/monai-through-1.6.0-get-fake-spatial-shape-eval-sandbox-bypass-via-attribute-chains [Third Party Advisory]

Authoritative record: CVE-2026-100842 at cve.org

Vendors: project-monai

Weaknesses: CWE-95

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-100842 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Saturday, October 3, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.