Vulnerability Details CVE-2026-100845
MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allow_pickle=True when loading .npy and .npz files. Attackers can craft malicious .npy files with pickle payloads that execute arbitrary code when loaded through MONAI's standard data pipeline.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 2.5%
CVSS Severity
CVSS v3 Score 7.8
References
Products affected by CVE-2026-100845
-
cpe:2.3:a:project-monai:monai:0.1.0
-
cpe:2.3:a:project-monai:monai:0.2.0
-
cpe:2.3:a:project-monai:monai:0.3.0
-
cpe:2.3:a:project-monai:monai:0.4.0
-
cpe:2.3:a:project-monai:monai:0.5.0
-
cpe:2.3:a:project-monai:monai:0.5.1
-
cpe:2.3:a:project-monai:monai:0.5.2
-
cpe:2.3:a:project-monai:monai:0.5.3
-
cpe:2.3:a:project-monai:monai:0.6.0
-
cpe:2.3:a:project-monai:monai:0.7.0
-
cpe:2.3:a:project-monai:monai:0.8.0
-
cpe:2.3:a:project-monai:monai:0.8.1
-
cpe:2.3:a:project-monai:monai:0.9.0
-
cpe:2.3:a:project-monai:monai:0.9.1
-
cpe:2.3:a:project-monai:monai:1.0.0
-
cpe:2.3:a:project-monai:monai:1.0.1
-
cpe:2.3:a:project-monai:monai:1.1.0
-
cpe:2.3:a:project-monai:monai:1.2.0
-
cpe:2.3:a:project-monai:monai:1.3.0
-
cpe:2.3:a:project-monai:monai:1.3.1
-
cpe:2.3:a:project-monai:monai:1.3.2
-
cpe:2.3:a:project-monai:monai:1.3.3
-
cpe:2.3:a:project-monai:monai:1.4.0
-
cpe:2.3:a:project-monai:monai:1.4.1
-
cpe:2.3:a:project-monai:monai:1.5.0
-
cpe:2.3:a:project-monai:monai:1.5.1
-
cpe:2.3:a:project-monai:monai:1.5.2