Product by Project-MONAI

    Project-MONAI MONAI

    16 known vulnerabilities in Project-MONAI MONAI (Project-MONAI), 0 of them actively exploited (CISA KEV).

    Key figures

    16

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Project-MONAI MONAI (Project-MONAI)
    HighCVE-2026-100844

    MONAI before 1.6.0 OS Command Injection via dataset_name_or_id

    		8.4
    HighCVE-2026-118683

    MONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.conf

    		8.8
    HighCVE-2026-109360

    MONAI 0.4.0 before 1.6.1 RCE via SENet Pretrained Weights Over Plaintext HTTP

    		7.5
    HighCVE-2026-100846

    MONAI before 1.5.2 Remote Code Execution via Pickle Deserialization

    		7.6
    HighCVE-2025-58756

    MONAI's unsafe torch usage may lead to arbitrary code execution

    also in 1 other product

    		8.8
    HighCVE-2026-100840

    MONAI through 1.6.0 Remote Code Execution via bundle configuration

    		7.8
    HighCVE-2026-100843

    MONAI before 1.6.0 Remote Code Execution via algo_from_pickle

    		7.8
    HighCVE-2025-58757

    MONAI's unsafe use of Pickle deserialization may lead to RCE

    also in 1 other product

    		8.8
    HighCVE-2025-58755

    MONAI has path traversal issue that may lead to arbitrary file writes

    also in 1 other product

    		8.8
    HighCVE-2026-100845

    MONAI before 1.6.0 Remote Code Execution via NumpyReader

    		7.8
    HighCVE-2026-119578

    MONAI 1.6.0 before 1.6.1 Code Execution via Auto3DSeg algo_from_json()

    		7.8
    HighCVE-2026-100841

    MONAI through 1.6.0 PersistentDataset Remote Code Execution via Pickle Cache

    		7.8
    HighCVE-2026-118684

    MONAI before 1.6.1 Missing Integrity Verification via check_hash in Downloads

    		5.9
    HighCVE-2026-109361

    MONAI 1.2.0 before 1.6.1 Insecure Deserialization RCE via nnUNetV2Runner postprocessing_file Path

    		7.3
    HighCVE-2026-100842

    MONAI through 1.6.0 _get_fake_spatial_shape eval() Sandbox Bypass via Attribute Chains

    		7.0
    MediumCVE-2026-21851

    MONAI has Path Traversal (Zip Slip) in NGC Private Bundle Download

    		5.3

    All products by Project-MONAI