CVE-2026-100845

high

Description

MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allow_pickle=True when loading .npy and .npz files. Attackers can craft malicious .npy files with pickle payloads that execute arbitrary code when loaded through MONAI's standard data pipeline.

References

Advisories
More

https://www.vulncheck.com/advisories/monai-before-1.6.0-remote-code-execution-via-numpyreader

https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-wg9g-w2j2-8pgr

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87843

Details

Source: Mitre, NVD

Published: 2026-09-27

Updated: 2026-09-30

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Severity: High

CVSS v4

Base Score: 8.5

Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Severity: High

EPSS

EPSS: 0.00203