Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Project-MONAI MONAI 1.6.1 Clear all filters
TI-2026-71177 CVE-2026-109361 · GHSA-7hmf-j253-4p2j

Insecure deserialization in MONAI nnUNetV2Runner allows code execution

Priority LOW 32

MONAI 1.2.0 before 1.6.1 contains an insecure deserialization vulnerability in nnUNetV2Runner that unpickles the postprocessing_file path read from inference_information.json without confining it to the results directory…

CVSS 4.0HIGH 7.0 Local Low privileges User interaction EPSS 0.00234 Published 2026-10-12 Fixed in 1.6.1 CWE-502
TI-2026-71176 CVE-2026-109360 · GHSA-fvr7-75wp-4566

MONAI RCE via unsafe SENet pretrained weight loading over plaintext HTTP

Priority HIGH 69

MONAI 0.4.0 before 1.6.1 contains a remote code execution vulnerability that allows on-path attackers to execute code by tampering with SENet pretrained weights fetched over plaintext HTTP.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00562 Published 2026-10-12 Fixed in 1.6.1 CWE-502