Project-MONAI

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high15CVSS 7.0–8.9

Exploited now

Project-MONAI records in CISA KEV

No Project-MONAI vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Monai 8 records HIGH

Records

8 records in Monai · all components

TI-2026-64984 CVE-2026-100846 · GHSA-cvqf-4876-w239

MONAI before 1.5.2 Remote Code Execution via Pickle Deserialization

HIGH 73

MONAI before 1.5.2 contains a deserialization of untrusted data vulnerability in the algo_from_pickle function in monai/auto3dseg/utils.py.

CVSS 4.0HIGH 8.8 Network High privileges User interaction EPSS 0.00361 Published 2026-09-27 Fixed in 1.5.2 CWE-502

TI-2026-64983 CVE-2026-100845 · GHSA-4jj3-3266-2688

MONAI before 1.6.0 Remote Code Execution via NumpyReader

HIGH 72

MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allow_pickle=True when loading .npy and .npz files.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00203 Published 2026-09-27 Fixed in 1.6.0 CWE-502

TI-2026-64982 CVE-2026-100844 · GHSA-x7wh-49x3-6748

MONAI before 1.6.0 OS Command Injection via dataset_name_or_id

HIGH 72

MONAI before 1.6.0 is vulnerable to OS command injection in the nnUNetV2Runner component (monai.apps.nnunet.nnunetv2_runner).

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.00922 Published 2026-09-27 Fixed in 1.6.0 CWE-78

TI-2026-64981 CVE-2026-100843 · GHSA-m8hq-fmc4-c3v2

MONAI before 1.6.0 Remote Code Execution via algo_from_pickle

HIGH 72

MONAI versions before 1.6.0 contain a remote code execution vulnerability in the algo_from_pickle() function due to unsafe pickle.loads() deserialization in monai/auto3dseg/utils.py.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00305 Published 2026-09-27 Fixed in 1.6.0 CWE-502

TI-2026-64978 CVE-2026-100840 · GHSA-8jxj-xq3g-hvm2

MONAI through 1.6.0 Remote Code Execution via bundle configuration

HIGH 72

MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves _target_ values to arbitrary importable callables without an allow list and passes $ expressions to Pyth…

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00313 Published 2026-09-27 No fix listed CWE-95

TI-2026-64980 CVE-2026-100842 · GHSA-j335-cfj5-2fw8

MONAI through 1.6.0 _get_fake_spatial_shape eval() Sandbox Bypass via Attribute Chains

HIGH 67

MONAI through 1.6.0 contains an eval injection vulnerability in _get_fake_spatial_shape() in monai/bundle/scripts.py.

CVSS 4.0HIGH 7.3 Local Low privileges No interaction EPSS 0.00183 Published 2026-09-27 No fix listed CWE-95

TI-2026-17553 CVE-2026-21851 · GHSA-9rg3-9pvr-6p27

MONAI has Path Traversal (Zip Slip) in NGC Private Bundle Download

MEDIUM 57

MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging.

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00357 Published 2026-01-07 Fixed in 1.5.2 CWE-22

TI-2026-64979 CVE-2026-100841 · GHSA-wfpp-6gx5-h8xr

MONAI through 1.6.0 PersistentDataset Remote Code Execution via Pickle Cache

LOW 38

In MONAI 1.6.0, PersistentDataset (monai/data/dataset.py) explicitly rejects the combination track_meta=True with weights_only=True, forcing users who cache MetaTensors (the default tensor type in MONAI >= 1.0) to run to…

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00128 Published 2026-09-27 No fix listed CWE-502

Open these records in search →