CVE-2026-100845CWE-502insecure-deserialization

CVE-2026-100845

High · published September 27, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
3.3
In the wild
Unconfirmed
What it is

MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allow_pickle=True when loading .npy and .npz files. Attackers can craft malicious .npy files with pickle payloads that execute arbitrary code when loaded through MONAI's standard data pipeline.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
8.5 · CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00144 · 3.3th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2026-09-27T06:17Z
Affected products (1)
ProductVersionsFixed in
project-monai/monai< 1.6.01.6.0
References (3)
https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-wg9g-w2j2-8pgr · [email protected]https://www.vulncheck.com/advisories/monai-before-1.6.0-remote-code-execution-via-numpyreader · [email protected]https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-wg9g-w2j2-8pgr · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 28 SEP 03:25Z
    EPSS moved — → 0%
    epss
  • 27 SEP 01:28Z
    MONAI before 1.6.0 Remote Code Execution via NumpyReader
    cvelistv5