Deserialization of Untrusted Data in MONAI Software by Project MONAI
CVE-2026-100846

8.8HIGH

Key Information:

Vendor

Project-monai

Status
Monai
Vendor
CVE Published:
27 September 2026

What is CVE-2026-100846?

MONAI prior to version 1.5.2 is vulnerable to a deserialization of untrusted data issue found in the algo_from_pickle function located in monai/auto3dseg/utils.py. This vulnerability arises when the function processes a .pkl file, using pickle.loads without appropriate validation of the data's source or content. When an application uses algo_from_pickle with a maliciously crafted pickle file, it can result in the execution of arbitrary code through an object implementing the reduce method during deserialization. This could allow an attacker to potentially execute harmful code within the application's environment, highlighting the need for stringent input validation and security measures.

Affected Version(s)

MONAI 0 < 1.5.2

MONAI 1.5.2

References

https://github.com/Project-MONAI/MONAI/security/advisorie...
vendor-advisory
https://www.vulncheck.com/advisories/monai-before-1.5.2-r...
third-party-advisory

CVSS V4

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

hnking-star
.