CVE-2026-100845
MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allow_pickle=True when loading .npy and .npz files. Attackers can craft malicious .npy files with pickle payloads that execute arbitrary code when loaded through MONAI's standard data pipeline.
- Published Sep 27, 2026
- CVSS 8.5 high
- 0.1% chance of exploitation in the next 30 days (EPSS)
- Public exploit code is available
- A fix is available