CVE-2026-100845
Received Received - Intake

Unsafe Deserialization in MONAI via NumpyReader

Publication date: 2026-09-27

Last updated on: 2026-09-27

Assigner: VulnCheck

Description
MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allow_pickle=True when loading .npy and .npz files. Attackers can craft malicious .npy files with pickle payloads that execute arbitrary code when loaded through MONAI's standard data pipeline.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-27
Last Modified
2026-09-27
Generated
2026-09-27
AI Q&A
2026-09-27
EPSS Evaluated
N/A
NVD
CVE-2026-100845
EUVD
EUVD-2026-87843

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
monai monai to 1.6.0 (exc)
project_monai monai to 1.6.0 (exc)
project_monai monai to 1.5.2 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-502 The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an unsafe deserialization flaw in MONAI versions before 1.6.0. The NumpyReader class unconditionally uses numpy.load with allow_pickle=True when loading .npy and .npz files. Attackers can craft malicious files with pickle payloads that execute arbitrary code when processed by MONAI's data pipeline.

Detection Guidance

To detect this vulnerability, inspect systems running MONAI versions before 1.6.0 for .npy or .npz files processed by the NumpyReader class. Check for unexpected network connections or processes spawned after loading these files. Use commands like 'pip show monai' to verify the installed version. If version is below 1.6.0, the system is likely vulnerable.

Impact Analysis

This vulnerability allows attackers to execute arbitrary code on systems using affected MONAI versions. It could lead to system compromise, data theft, or further network infiltration if malicious .npy or .npz files are loaded through MONAI's pipeline.

Compliance Impact

This vulnerability could lead to unauthorized access or exposure of sensitive data, violating GDPR and HIPAA requirements for data protection and confidentiality. Organizations using affected MONAI versions may face compliance violations if exploited.

Mitigation Strategies
  • Upgrade MONAI to version 1.6.0 or later immediately to patch the vulnerability.
  • Audit and remove any untrusted .npy or .npz files from shared datasets or environments.
  • Monitor systems for unusual activity following file loads, especially in medical data pipelines.
  • Restrict write permissions to directories containing .npy or .npz files to prevent file poisoning.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-100845. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart