Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.5
CVE-2026-100845: MONAI <1.6.0 may run malicious code from data files
CVE-2026-100845 · published 1 month ago
Summary
Older versions of the MONAI toolkit load certain NumPy data files without checking their contents. If an attacker supplies a specially crafted .npy or .npz file, it can cause the system to execute unwanted code when the file is processed. Upgrade to MONAI version 1.6.0 or later, or only load data from trusted sources, to eliminate the risk.
What to do
- Update project-monai monai to version 1.6.0 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| project-monai | monai | < 1.6.0 |
Original advisory text
MONAI before 1.6.0 Remote Code Execution via NumpyReader
MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allow_pickle=True when loading .npy and .npz files. Attackers can craft malicious .npy files with pickle payloads that execute arbitrary code when loaded through MONAI's standard data pipeline.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
8.5
High
Type
CWE-502Deserialization of Untrusted Data
Timeline
Published27 Sep 2026
Updated29 Oct 2026
First seen27 Sep 2026
Track software like this
Free during beta