Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

17 records

Vendor: Project-MONAI Clear all filters
TI-2026-83080 CVE-2026-119578 · GHSA-rx25-w8hq-hr3g

Remote code execution in MONAI Auto3DSeg algo_from_json()

Priority HIGH 72

MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg algo_from_json() that allows attackers to run Python code via a crafted work directory's algo_object.json.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00552 Published 2026-10-30 Fixed in 1.6.1 CWE-470
TI-2026-82172 CVE-2026-118684 · GHSA-59gw-w64r-2mg7

Missing integrity check in MONAI downloads accepts unverified files

Priority HIGH 69

MONAI before 1.6.1 contains an insufficient integrity verification vulnerability in check_hash() that silently returns True when hash_val is None, with MD5 as the default hash type.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00185 Published 2026-10-28 Fixed in 1.6.1 CWE-327
TI-2026-82171 CVE-2026-118683 · GHSA-475h-4rfw-9899

Code execution in MONAI through bundle logging.conf files

Priority MEDIUM 40

MONAI from 1.2.0 before 1.6.1 contains a remote code execution vulnerability in ConfigWorkflow.__init__, which passes a bundle's configs/logging.conf to logging.config.fileConfig that eval()s handler class and args field…

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00486 Published 2026-10-28 Fixed in 1.6.1 CWE-94
TI-2026-71177 CVE-2026-109361 · GHSA-7hmf-j253-4p2j

Insecure deserialization in MONAI nnUNetV2Runner allows code execution

Priority LOW 32

MONAI 1.2.0 before 1.6.1 contains an insecure deserialization vulnerability in nnUNetV2Runner that unpickles the postprocessing_file path read from inference_information.json without confining it to the results directory…

CVSS 4.0HIGH 7.0 Local Low privileges User interaction EPSS 0.00234 Published 2026-10-12 Fixed in 1.6.1 CWE-502
TI-2026-71176 CVE-2026-109360 · GHSA-fvr7-75wp-4566

MONAI RCE via unsafe SENet pretrained weight loading over plaintext HTTP

Priority HIGH 69

MONAI 0.4.0 before 1.6.1 contains a remote code execution vulnerability that allows on-path attackers to execute code by tampering with SENet pretrained weights fetched over plaintext HTTP.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00562 Published 2026-10-12 Fixed in 1.6.1 CWE-502
TI-2026-64984 CVE-2026-100846 · GHSA-cvqf-4876-w239

MONAI before 1.5.2 Remote Code Execution via Pickle Deserialization

Priority HIGH 73

MONAI before 1.5.2 contains a deserialization of untrusted data vulnerability in the algo_from_pickle function in monai/auto3dseg/utils.py.

CVSS 4.0HIGH 8.8 Network High privileges User interaction EPSS 0.00361 Published 2026-09-27 Fixed in 1.5.2 CWE-502
TI-2026-64983 CVE-2026-100845 · GHSA-4jj3-3266-2688

MONAI before 1.6.0 Remote Code Execution via NumpyReader

Priority HIGH 72

MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allow_pickle=True when loading .npy and .npz files.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00203 Published 2026-09-27 Fixed in 1.6.0 CWE-502
TI-2026-64981 CVE-2026-100843 · GHSA-m8hq-fmc4-c3v2

MONAI before 1.6.0 Remote Code Execution via algo_from_pickle

Priority HIGH 72

MONAI versions before 1.6.0 contain a remote code execution vulnerability in the algo_from_pickle() function due to unsafe pickle.loads() deserialization in monai/auto3dseg/utils.py.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00305 Published 2026-09-27 Fixed in 1.6.0 CWE-502
TI-2026-64979 CVE-2026-100841 · GHSA-wfpp-6gx5-h8xr

MONAI through 1.6.0 PersistentDataset Remote Code Execution via Pickle Cache

Priority LOW 38

In MONAI 1.6.0, PersistentDataset (monai/data/dataset.py) explicitly rejects the combination track_meta=True with weights_only=True, forcing users who cache MetaTensors (the default tensor type in MONAI >= 1.0) to run to…

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00128 Published 2026-09-27 No fix listed CWE-502
TI-2026-64978 CVE-2026-100840 · GHSA-8jxj-xq3g-hvm2

MONAI through 1.6.0 Remote Code Execution via bundle configuration

Priority HIGH 72

MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves _target_ values to arbitrary importable callables without an allow list and passes $ expressions to Pyth…

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00313 Published 2026-09-27 No fix listed CWE-95