Insecure Deserialization Vulnerability in MONAI Products by Project MONAI
CVE-2026-109361
7HIGH
What is CVE-2026-109361?
MONAI versions prior to 1.6.1 are vulnerable to an insecure deserialization issue within the nnUNetV2Runner component. This vulnerability arises because the application does not limit the postprocessing_file path, read from inference_information.json, to the results directory. As a result, an attacker with the ability to modify inference_information.json could redirect execution to a malicious pickle located elsewhere on the filesystem. This could lead to arbitrary code execution when the predict_ensemble_postprocessing function is invoked.
Affected Version(s)
MONAI 1.2.0 < 1.6.1
MONAI 1.6.1