Unsafe Deserialization Vulnerability in MONAI NumpyReader Class
CVE-2026-100845

8.5HIGH

Key Information:

Vendor

Project-monai

Status
Monai
Vendor
CVE Published:
27 September 2026

What is CVE-2026-100845?

An unsafe deserialization vulnerability exists in the NumpyReader class of MONAI prior to version 1.6.0. This vulnerability arises from the use of numpy.load with allow_pickle=True, which allows attackers to craft malicious .npy files containing pickle payloads. When these files are loaded through MONAI's standard data pipeline, arbitrary code can be executed, posing a significant security threat.

Affected Version(s)

MONAI 0 < 1.6.0

MONAI 1.6.0

References

https://github.com/Project-MONAI/MONAI/security/advisorie...
vendor-advisory
https://www.vulncheck.com/advisories/monai-before-1.6.0-r...
third-party-advisory

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

romain-deperne
.