Vulnerability Description
MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allow_pickle=True when loading .npy and .npz files. Attackers can craft malicious .npy files with pickle payloads that execute arbitrary code when loaded through MONAI's standard data pipeline.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Project-Monai | Monai | < 1.6.0 |
Related Weaknesses (CWE)
References
- https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-wg9g-w2j2-8pgrExploitVendor Advisory
- https://www.vulncheck.com/advisories/monai-before-1.6.0-remote-code-execution-viThird Party Advisory
- https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-wg9g-w2j2-8pgrExploitVendor Advisory
FAQ
What is CVE-2026-100845?
CVE-2026-100845 is a vulnerability with a CVSS score of 7.8 (HIGH). MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allow_pickle=True when loading .npy and .npz files. Attackers can...
How severe is CVE-2026-100845?
CVE-2026-100845 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-100845?
Check the references section above for vendor advisories and patch information. Affected products include: Project-Monai Monai.