Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2026-100845

MONAI before 1.6.0 Remote Code Execution via NumpyReader

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allow_pickle=True when loading .npy and .npz files. Attackers can craft malicious .npy files with pickle payloads that execute arbitrary code when loaded through MONAI's standard data pipeline.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Project-MONAI MONAI

Default version status: unaffected

  • 0 to < 1.6.0affected
  • 1.6.0unaffected
pkg:pypi/monai

References