CVE-2025-58757CWE-502

MONAI's unsafe use of Pickle deserialization may lead to RCE

High · published September 8, 2025

CVSS v3.1
8.8
EPSS
1%
Percentile
50.3
In the wild
Unconfirmed
What it is

MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. In versions up to and including 1.5.0, the `pickle_operations` function in `monai/data/utils.py` automatically handles dictionary key-value pairs ending with a specific suffix and deserializes them using `pickle.loads()` . This function also lacks any security measures. The deserialization may lead to code execution. As of time of publication, no known fixed versions are available.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00645 · 50.3th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2025-09-08T23:42Z
EPSS history
Timeline
  • 08 SEP 23:42Z
    MONAI's unsafe use of Pickle deserialization may lead to RCE
    cvelistv5