Skip to contentProject-monai Monai vulnerabilities
- project-monai monaiMONAI 1.6.0 before 1.6.1 Code Execution via Auto3DSeg algo_from_json()CVE-2026-1195788.5 High
- project-monai monaiMONAI before 1.6.1 Missing Integrity Verification via check_hash in DownloadsCVE-2026-1186848.2 High
- project-monai monaiMONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.confCVE-2026-1186838.6 High
- project-monai monaiMONAI: MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)CVE-2026-48705Fix available9.3 Critical
- project-monai monaiMONAI 1.2.0 before 1.6.1 Insecure Deserialization RCE via nnUNetV2Runner postprocessing_file PathCVE-2026-1093617.0 High
- project-monai monaiMONAI 0.4.0 before 1.6.1 RCE via SENet Pretrained Weights Over Plaintext HTTPCVE-2026-1093607.7 High
- project-monai monaiMONAI through 1.6.0 _get_fake_spatial_shape eval() Sandbox Bypass via Attribute ChainsCVE-2026-100842Fix available7.3 High
- project-monai monaiMONAI through 1.6.0 PersistentDataset Remote Code Execution via Pickle CacheCVE-2026-1008418.5 High
- project-monai monaiMONAI through 1.6.0 Remote Code Execution via bundle configurationCVE-2026-100840Fix available8.5 High
- project-monai monaiMONAI before 1.6.0 Remote Code Execution via NumpyReaderCVE-2026-100845Fix available8.5 High
- project-monai monaiMONAI before 1.6.0 OS Command Injection via dataset_name_or_idCVE-2026-100844Fix available8.6 High
- project-monai monaiMONAI before 1.6.0 Remote Code Execution via algo_from_pickleCVE-2026-100843Fix available8.5 High
- project-monai monaiMONAI before 1.5.2 Remote Code Execution via Pickle DeserializationCVE-2026-100846Fix available8.8 High
- project-monai monaiMONAI has Path Traversal (Zip Slip) in NGC Private Bundle DownloadCVE-2026-21851Fix available5.3 Medium
- monai medical open network for ai, project-monai monai +1 moreMONAI's unsafe use of Pickle deserialization may lead to RCECVE-2025-58757Fix available8.8 High
- monai medical open network for ai, project-monai monai +1 moreMONAI's unsafe torch usage may lead to arbitrary code executionCVE-2025-58756Fix available8.8 High
- monai medical open network for ai, project-monai monai +1 moreMONAI has path traversal issue that may lead to arbitrary file writesCVE-2025-58755Fix available8.8 High