Read the docs

Project-MONAI

Records17All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9

Exploited now

Project-MONAI records in CISA KEV

No Project-MONAI vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Monai 8 records HIGH

Records

17 records

TI-2026-64984 CVE-2026-100846 · GHSA-cvqf-4876-w239

MONAI before 1.5.2 Remote Code Execution via Pickle Deserialization

Priority HIGH 73

MONAI before 1.5.2 contains a deserialization of untrusted data vulnerability in the algo_from_pickle function in monai/auto3dseg/utils.py.

CVSS 4.0HIGH 8.8 Network High privileges User interaction EPSS 0.00361 Published 2026-09-27 Fixed in 1.5.2 CWE-502
TI-2026-83080 CVE-2026-119578 · GHSA-rx25-w8hq-hr3g

Remote code execution in MONAI Auto3DSeg algo_from_json()

Priority HIGH 72

MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg algo_from_json() that allows attackers to run Python code via a crafted work directory's algo_object.json.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00552 Published 2026-10-30 Fixed in 1.6.1 CWE-470
TI-2026-64983 CVE-2026-100845 · GHSA-4jj3-3266-2688

MONAI before 1.6.0 Remote Code Execution via NumpyReader

Priority HIGH 72

MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allow_pickle=True when loading .npy and .npz files.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00203 Published 2026-09-27 Fixed in 1.6.0 CWE-502
TI-2026-64981 CVE-2026-100843 · GHSA-m8hq-fmc4-c3v2

MONAI before 1.6.0 Remote Code Execution via algo_from_pickle

Priority HIGH 72

MONAI versions before 1.6.0 contain a remote code execution vulnerability in the algo_from_pickle() function due to unsafe pickle.loads() deserialization in monai/auto3dseg/utils.py.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00305 Published 2026-09-27 Fixed in 1.6.0 CWE-502
TI-2026-64978 CVE-2026-100840 · GHSA-8jxj-xq3g-hvm2

MONAI through 1.6.0 Remote Code Execution via bundle configuration

Priority HIGH 72

MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves _target_ values to arbitrary importable callables without an allow list and passes $ expressions to Pyth…

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00313 Published 2026-09-27 No fix listed CWE-95
TI-2026-82172 CVE-2026-118684 · GHSA-59gw-w64r-2mg7

Missing integrity check in MONAI downloads accepts unverified files

Priority HIGH 69

MONAI before 1.6.1 contains an insufficient integrity verification vulnerability in check_hash() that silently returns True when hash_val is None, with MD5 as the default hash type.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00185 Published 2026-10-28 Fixed in 1.6.1 CWE-327
TI-2026-71176 CVE-2026-109360 · GHSA-fvr7-75wp-4566

MONAI RCE via unsafe SENet pretrained weight loading over plaintext HTTP

Priority HIGH 69

MONAI 0.4.0 before 1.6.1 contains a remote code execution vulnerability that allows on-path attackers to execute code by tampering with SENet pretrained weights fetched over plaintext HTTP.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00562 Published 2026-10-12 Fixed in 1.6.1 CWE-502
TI-2026-82171 CVE-2026-118683 · GHSA-475h-4rfw-9899

Code execution in MONAI through bundle logging.conf files

Priority MEDIUM 40

MONAI from 1.2.0 before 1.6.1 contains a remote code execution vulnerability in ConfigWorkflow.__init__, which passes a bundle's configs/logging.conf to logging.config.fileConfig that eval()s handler class and args field…

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00486 Published 2026-10-28 Fixed in 1.6.1 CWE-94
TI-2026-64979 CVE-2026-100841 · GHSA-wfpp-6gx5-h8xr

MONAI through 1.6.0 PersistentDataset Remote Code Execution via Pickle Cache

Priority LOW 38

In MONAI 1.6.0, PersistentDataset (monai/data/dataset.py) explicitly rejects the combination track_meta=True with weights_only=True, forcing users who cache MetaTensors (the default tensor type in MONAI >= 1.0) to run to…

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00128 Published 2026-09-27 No fix listed CWE-502
TI-2026-71177 CVE-2026-109361 · GHSA-7hmf-j253-4p2j

Insecure deserialization in MONAI nnUNetV2Runner allows code execution

Priority LOW 32

MONAI 1.2.0 before 1.6.1 contains an insecure deserialization vulnerability in nnUNetV2Runner that unpickles the postprocessing_file path read from inference_information.json without confining it to the results directory…

CVSS 4.0HIGH 7.0 Local Low privileges User interaction EPSS 0.00234 Published 2026-10-12 Fixed in 1.6.1 CWE-502
Open these records in search →