PT-2026-40433 · Nu-Net · Nu-Net

Published 2026-05-12 · Updated 2026-05-19 · CVE-2026-44246

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions nU-Net versions prior to 2.4.1

Description The Issue Triage workflow in .github/workflows/issue-triage.yml is susceptible to Agentic Workflow Injection. The workflow assigns the allowed non write users variable to ${{ github.event.issue.user.login }}, allowing any authenticated GitHub user who opens an issue to trigger the workflow with controlled content. Untrusted issue titles and bodies are embedded directly into the prompt of anthropics/claude-code-action, which executes a command-capable Claude agent with permissions to relabel and comment on issues via gh. An attacker can submit a crafted issue to manipulate the agent into performing actions beyond its intended triage purpose.

Recommendations Update to version 2.4.1.

Exploit

Fix

Special Elements Injection

Weakness Enumeration

CWE-1427

CWE-74

Related Identifiers

CVE-2026-44246

Affected Products

Nu-Net

References · 4

• 🔥 https://github.com/MIC-DKFZ/nnUNet/security/advisories/GHSA-63mx-j37w-gh59 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-44246 · Security Note
• https://twitter.com/CVEnew/status/2054324010511741000 · Twitter Post
• https://t.me/cveNotify/164104 · Telegram Post