Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-100845— MONAI before 1.6.0 Remote Code Execution via NumpyReader

Quick assessment

Affected

Project-MONAI MONAI

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 MONAI 1.6.0 版本之前，NumpyReader 类中存在不安全的反序列化漏洞。该漏洞在加载 .npy 和 .npz 文件时，无条件地使用 numpy.load 并设置 allow_pickle=True。攻击者可以构造带有恶意 pickle 负载的 .npy 文件，当这些文件通过 MONAI 的标准数据管道加载时，将执行任意代码。

CVSS 7.8 · High EPSS 0.14% · P3 Updated Sep 28, 2026

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

MONAI before 1.6.0 Remote Code Execution via NumpyReader

Source: CVE Program / CVE List V5

Vulnerability Description

MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allow_pickle=True when loading .npy and .npz files. Attackers can craft malicious .npy files with pickle payloads that execute arbitrary code when loaded through MONAI's standard data pipeline.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

可信数据的反序列化

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Project-MONAI	MONAI	0 ~ 1.6.0	-

II. Public POCs for CVE-2026-100845

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-100845

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-100845 (1)

🔗 MONAI before 1.6.0 Remote Code Execution via NumpyReader | Advisories | VulnCheck third-party-advisory

Other References for CVE-2026-100845 (1)

https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-wg9g-w2j2-8pgr vendor-advisory

https://www.cve.org/CVERecord?id=CVE-2026-100845

Same Patch Batch · Project-MONAI · 2026-09-27 · 7 CVEs total

CVE-2026-100844	8.4 HIGH	MONAI before 1.6.0 OS Command Injection via dataset_name_or_id
CVE-2026-100841	7.8 HIGH	MONAI through 1.6.0 PersistentDataset Remote Code Execution via Pickle Cache
CVE-2026-100843	7.8 HIGH	MONAI before 1.6.0 Remote Code Execution via algo_from_pickle
CVE-2026-100840	7.8 HIGH	MONAI through 1.6.0 Remote Code Execution via bundle configuration
CVE-2026-100846	7.6 HIGH	MONAI before 1.5.2 Remote Code Execution via Pickle Deserialization
CVE-2026-100842	7.0 HIGH	MONAI through 1.6.0 _get_fake_spatial_shape eval() Sandbox Bypass via Attribute Chains

IV. Related Vulnerabilities

Same product: MONAI

Same vendor: Project-MONAI

Same weakness: CWE-502

V. Comments for CVE-2026-100845

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2026-100845— MONAI before 1.6.0 Remote Code Execution via NumpyReader

Quick assessment

I. Basic Information for CVE-2026-100845

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2026-100845

III. Intelligence Information for CVE-2026-100845

Vendor Advisories for CVE-2026-100845 (1)

Other References for CVE-2026-100845 (1)

Same Patch Batch · Project-MONAI · 2026-09-27 · 7 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2026-100845

Leave a comment