Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

MONAI — Vulnerabilities & Security Advisories 13

All 13 CVE vulnerabilities found in MONAI, with AI-generated Chinese analysis, references, and POCs.

Vendor: Project-MONAI

CVE ID Title CVSS Severity Published
CVE-2026-109360 MONAI 0.4.0 before 1.6.1 RCE via SENet Pretrained Weights Over Plaintext HTTP CWE-502 7.5 High 2026-10-12
CVE-2026-109361 MONAI 1.2.0 before 1.6.1 Insecure Deserialization RCE via nnUNetV2Runner postprocessing_file Path CWE-502 7.3 High 2026-10-12
CVE-2026-100846 MONAI before 1.5.2 Remote Code Execution via Pickle Deserialization CWE-502 7.6 High 2026-09-27
CVE-2026-100845 MONAI before 1.6.0 Remote Code Execution via NumpyReader CWE-502 7.8 High 2026-09-27
CVE-2026-100844 MONAI before 1.6.0 OS Command Injection via dataset_name_or_id CWE-78 8.4 High 2026-09-27
CVE-2026-100843 MONAI before 1.6.0 Remote Code Execution via algo_from_pickle CWE-502 7.8 High 2026-09-27
CVE-2026-100842 MONAI through 1.6.0 _get_fake_spatial_shape eval() Sandbox Bypass via Attribute Chains CWE-95 7.0 High 2026-09-27
CVE-2026-100841 MONAI through 1.6.0 PersistentDataset Remote Code Execution via Pickle Cache CWE-502 7.8 High 2026-09-27
CVE-2026-100840 MONAI through 1.6.0 Remote Code Execution via bundle configuration CWE-95 7.8 High 2026-09-27
CVE-2026-21851 MONAI has Path Traversal (Zip Slip) in NGC Private Bundle Download CWE-22 5.3 Medium 2026-01-07
CVE-2025-58757 MONAI's unsafe use of Pickle deserialization may lead to RCE CWE-502 8.8 High 2025-09-08
CVE-2025-58756 MONAI's unsafe torch usage may lead to arbitrary code execution CWE-502 8.8 High 2025-09-08
CVE-2025-58755 MONAI has path traversal issue that may lead to arbitrary file writes CWE-22 8.8 High 2025-09-08

All 13 known CVE vulnerabilities affecting MONAI with full Chinese analysis, references, and POCs where available.