PT-2026-99466

Name of the Vulnerable Software and Affected Versions MONAI versions prior to 1.5.2 Description An issue exists where untrusted data is deserialized in the algo from pickle function within monai/auto3dseg/utils.py. The function processes .pkl files using pickle.loads without validating the source...

PT-2026-33562

Summary The algo from pickle function in monai/auto3dseg/utils.py causes pickle.loadsdata bytes to be executed, and it does not perform any validation on the input parameters. This ultimately leads to insecure deserialization and can result in code execution vulnerabilities. Details poc import...

Path Traversal

MONAI is vulnerable to a Path Traversal. The vulnerability is due to the use of zipfile.ZipFile.extractall without proper path validation in the downloadfromngcprivate function, which allows an attacker to craft a malicious ZIP archive that writes files outside the intended extraction directory a...

CVE-2026-21851

MONAI Medical Open Network for AI is an AI toolkit for health care imaging. In versions up to and including 1.5.1, a Path Traversal Zip Slip vulnerability exists in MONAI's downloadfromngcprivate function. The function uses zipfile.ZipFile.extractall without path validation, while other similar...

CVE-2026-21851

MONAI Medical Open Network for AI is an AI toolkit for health care imaging. In versions up to and including 1.5.1, a Path Traversal Zip Slip vulnerability exists in MONAI's downloadfromngcprivate function. The function uses zipfile.ZipFile.extractall without path validation, while other similar...

CVE-2026-21851 MONAI has Path Traversal (Zip Slip) in NGC Private Bundle Download

MONAI Medical Open Network for AI is an AI toolkit for health care imaging. In versions up to and including 1.5.1, a Path Traversal Zip Slip vulnerability exists in MONAI's downloadfromngcprivate function. The function uses zipfile.ZipFile.extractall without path validation, while other similar...

CVE-2026-21851

MONAI has a Path Traversal (Zip Slip) vulnerability in its NGC private bundle download path. In MONAI

2404-segmentation-pipeline (>=0.1.0, <=1.0.0), abdomenatlas (>=0.1.0, <=0.1.1) +49 more potentially affected by CVE-2026-21851 via monai (>=0.4.0, <=1.5.1)

monai PYPI version =0.4.0, =0.1.0, =0.1.0, =0.0.1, =1.0.0rc1, =0.0.1, =0.1.5, =0.1.0, =0.0.5, =0.1.0, =0.0.3, =6.0.0rc1, =0.1.2, =0.1.8 and more Source cves: CVE-2026-21851 Source advisory: MEND:CVE-2026-21851...

CVE-2026-21851 MONAI has Path Traversal (Zip Slip) in NGC Private Bundle Download

MONAI Medical Open Network for AI is an AI toolkit for health care imaging. In versions up to and including 1.5.1, a Path Traversal Zip Slip vulnerability exists in MONAI's downloadfromngcprivate function. The function uses zipfile.ZipFile.extractall without path validation, while other similar...

EUVD-2026-1039

MONAI Medical Open Network for AI is an AI toolkit for health care imaging. In versions up to and including 1.5.1, a Path Traversal Zip Slip vulnerability exists in MONAI's downloadfromngcprivate function. The function uses zipfile.ZipFile.extractall without path validation, while other similar...

CVE-2026-21851: Improper Limitation of a Pathname to a Restricted Directory

MONAI Medical Open Network for AI is an AI toolkit for health care imaging. In versions up to and including 1.5.1, a Path Traversal Zip Slip vulnerability exists in MONAI's downloadfromngcprivate function. The function uses zipfile.ZipFile.extractall without path validation, while other similar...

MONAI path traversal vulnerability

MONAI is a medical imaging AI toolkit open-sourced by Project MONAI. A path traversal vulnerability exists in MONAI 1.5.1 and earlier versions, which stems from the downloadfromngcprivate function using zipfile.ZipFile.extractall without path validation, which could lead to a path traversal attac...

2404-segmentation-pipeline (>=0.1.0, <=1.0.0), abdomenatlas (>=0.1.0, <=0.1.1) +35 more potentially affected by CVE-2026-21851 via monai (>=1.0.0, <=1.5.1)

monai PYPI version =1.0.0, =0.1.0, =0.1.0, =0.0.1, =1.0.0rc1, =0.0.1, =0.1.5, =0.0.5, =0.1.5, =0.0.3, =6.0.0rc1, =0.1.1, =1.0.1a4, =0.0.18.dev20240127, =0.1.6.dev20260211 and more Source cves: CVE-2026-21851 Source advisory: OSV:GHSA-9RG3-9PVR-6P27...

monailabel (0.4.1), monailabel-weekly (0.4.0.dev2228) +2 more potentially affected by CVE-2026-21851 via monai (0.9.0)

monai PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - monailabel 0.4.1 - monailabel-weekly 0.4.0.dev2228 - neurips-cellseg-gc =0.0.1, =0.1.5, =0.1.10 Source cves: CVE-2026-21851 Source advisory:...

magms (>=1.1.0, <=2.0.2) potentially affected by CVE-2026-21851 via monai (0.9.1)

monai PYPI version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - magms =1.1.0, =2.0.2 Source cves: CVE-2026-21851 Source advisory: OSV:GHSA-9RG3-9PVR-6P27...

2404-segmentation-pipeline (>=0.1.0, <=1.0.0), abdomenatlas (>=0.1.0, <=0.1.1) +35 more potentially affected by CVE-2026-21851 via monai (>=1.0.0, <=1.5.1)

monai PYPI version =1.0.0, =0.1.0, =0.1.0, =0.0.1, =1.0.0rc1, =0.0.1, =0.1.5, =0.0.5, =0.1.5, =0.0.3, =6.0.0rc1, =0.1.1, =1.0.1a4, =0.0.18.dev20240127, =0.1.6.dev20260211 and more Source cves: CVE-2026-21851 Source advisory: GHSA-9RG3-9PVR-6P27...

2404-segmentation-pipeline (>=0.1.0, <=1.0.0), abdomenatlas (>=0.1.0, <=0.1.1) +35 more potentially affected by CVE-2026-21851 via monai (>=1.0.0, <=1.5.1)

monai PYPI version =1.0.0, =0.1.0, =0.1.0, =0.0.1, =1.0.0rc1, =0.0.1, =0.1.5, =0.0.5, =0.1.5, =0.0.3, =6.0.0rc1, =0.1.1, =1.0.1a4, =0.0.18.dev20240127, =0.1.6.dev20260211 and more Source cves: CVE-2026-21851 Source advisory: SNYK:PYTHON-MONAI-14892724...

deep-labelprop (1.1.1), fastmonai (>=0.1.0, <=0.1.4) +5 more potentially affected by CVE-2026-21851 via monai (0.8.1)

monai PYPI version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - deep-labelprop 1.1.1 - fastmonai =0.1.0, =0.0.2, =0.0.3, =0.4.0.dev2201, =0.4.0.dev2208 Source cves: CVE-2026-21851 Source advisory:...

fedbiomed-cli (>=0.1.2, <=0.1.8) potentially affected by CVE-2026-21851 via monai (0.4.0)

monai PYPI version 0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - fedbiomed-cli =0.1.2, =0.1.8 Source cves: CVE-2026-21851 Source advisory: OSV:GHSA-9RG3-9PVR-6P27...

deep-labelprop (0.1.0), monailabel-weekly (0.1.0.dev2128) +2 more potentially affected by CVE-2026-21851 via monai (0.6.0)

monai PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - deep-labelprop 0.1.0 - monailabel-weekly 0.1.0.dev2128 - p-mod-api 0.0.2 - p2022 0.0.4 Source cves: CVE-2026-21851 Source advisory:...