PYSEC-2026-4020

MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allowpickle=True when loading .npy and .npz files. Attackers can craft malicious .npy files with pickle payloads that execute arbitrary code when loaded through...

CVE-2026-100845

MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allowpickle=True when loading .npy and .npz files. Attackers can craft malicious .npy files with pickle payloads that execute arbitrary code when loaded through...

PYSEC-2026-4020

MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allowpickle=True when loading .npy and .npz files. Attackers can craft malicious .npy files with pickle payloads that execute arbitrary code when loaded through...

CVE-2026-100845 MONAI before 1.6.0 Remote Code Execution via NumpyReader

MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allowpickle=True when loading .npy and .npz files. Attackers can craft malicious .npy files with pickle payloads that execute arbitrary code when loaded through...

EUVD-2026-87843

MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allowpickle=True when loading .npy and .npz files. Attackers can craft malicious .npy files with pickle payloads that execute arbitrary code when loaded through...

CVE-2026-100845

MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allowpickle=True when loading .npy and .npz files. Attackers can craft malicious .npy files with pickle payloads that execute arbitrary code when loaded through...

CVE-2026-100845 MONAI before 1.6.0 Remote Code Execution via NumpyReader

MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allowpickle=True when loading .npy and .npz files. Attackers can craft malicious .npy files with pickle payloads that execute arbitrary code when loaded through...

CVE-2026-100845 MONAI before 1.6.0 Remote Code Execution via NumpyReader

MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allowpickle=True when loading .npy and .npz files. Attackers can craft malicious .npy files with pickle payloads that execute arbitrary code when loaded through...

CVE-2026-100845

MONAI versions prior to 1.6.0 are vulnerable to Remote Code Execution (RCE) due to an unsafe deserialization flaw in the NumpyReader class. The root cause is the unconditional use of numpy.load with allow_pickle=True when processing .npy and .npz files. An attacker can craft malicious files conta...

PT-2026-105781

MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allow pickle=True when loading .npy and .npz files. Attackers can craft malicious .npy files with pickle payloads that execute arbitrary code when loaded through...

CVE-2026-100845: Deserialization of Untrusted Data

MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allowpickle=True when loading .npy and .npz files. Attackers can craft malicious .npy files with pickle payloads that execute arbitrary code when loaded through...

WS-2026-0032

The NumpyReader class in monai/data/imagereader.py unconditionally calls np.loadname, allowpickle=True, enabling arbitrary code execution when loading a crafted .npy or .npz file. The allowpickle parameter was hardcoded to True and could not be overridden by the caller, and NumpyReader is selecte...

GHSA-WG9G-W2J2-8PGR MONAI: Unsafe deserialization in NumpyReader allows arbitrary code execution via malicious .npy files

Summary The NumpyReader class in monai/data/imagereader.py unconditionally uses np.loadname, allowpickle=True line 1276, enabling arbitrary code execution when loading a crafted .npy or .npz file. This affects all MONAI versions up to and including the latest commit 5b71547. The allowpickle...

MONAI: Unsafe deserialization in NumpyReader allows arbitrary code execution via malicious .npy files

Summary The NumpyReader class in monai/data/imagereader.py unconditionally uses np.loadname, allowpickle=True line 1276, enabling arbitrary code execution when loading a crafted .npy or .npz file. This affects all MONAI versions up to and including the latest commit 5b71547. The allowpickle...

Deserialization of Untrusted Data

Overview monai is an AI Toolkit for Healthcare Imaging Affected versions of this package are vulnerable to Deserialization of Untrusted Data via NumpyReader.read in monai/data/imagereader.py, which called numpy.load with allowpickle=True unconditionally. An attacker who can supply a malicious NPY...

PT-2026-99465

Name of the Vulnerable Software and Affected Versions MONAI versions prior to 1.6.0 Description The NumpyReader class contains an unsafe deserialization issue. It unconditionally uses the numpy.load function with the allow pickle=True parameter when processing .npy and .npz files. This allows an...

PT-2026-83384

Summary The NumpyReader class in monai/data/image reader.py unconditionally uses np.loadname, allow pickle=True line 1276, enabling arbitrary code execution when loading a crafted .npy or .npz file. This affects all MONAI versions up to and including the latest commit 5b71547. The allow pickle...