# monai (PyPI) vulnerabilities 12 known vulnerabilities (1 critical, 10 high, 1 medium), with the versions each affects and the releases that fix them. ## At a glance - Latest release: 1.6.1 (Sep 27, 2026): no advisory with comparable ranges affects it; 1 advisory (CVE-2026-100841) can't be checked against versions - Newest unaffected release: 1.6.1 (Sep 27, 2026), the latest release, not counting 1 advisory without comparable ranges - Weekly downloads: 90.3K - Dependents: 128 - Releases: 46 since 0.0.1 (Mar 26, 2020) - Registry: https://pypi.org/project/monai/ - Releases read: Nov 8, 2026 ## Version timeline Affected versions per advisory, in version order: - CVE-2026-48705: 0.0.1 to 1.6.1rc0 (1.6.1 is outside it) - CVE-2026-100846: 0.0.1 to 1.5.2 (1.6.0 is outside it) - CVE-2026-100845: 0.0.1 to 1.5.2 (1.6.0 is outside it) - CVE-2026-100844: 0.0.1 to 1.5.2 (1.6.0 is outside it) - CVE-2026-100843: 0.0.1 to 1.5.2 (1.6.0 is outside it) - CVE-2026-100842: 0.0.1 to 1.6.0 (1.6.1rc0 is outside it) - CVE-2026-100841: its ranges can't be placed on these versions - CVE-2026-100840: 0.0.1 to 1.6.0 (1.6.1rc0 is outside it) - CVE-2026-21851: 0.0.1 to 1.5.2rc1 (1.5.2 is outside it) - CVE-2025-58757: 0.0.1 to 1.5.0 (1.5.1 is outside it) - CVE-2025-58756: 0.0.1 to 1.5.0 (1.5.1 is outside it) - CVE-2025-58755: 0.0.1 to 1.5.0 (1.5.1 is outside it) ## Advisories (12) ### [CVE-2026-48705](https://cve.now/CVE-2026-48705): MONAI: MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass) - Severity: Critical 9.3 - Published: Nov 5, 2026 - Affected: fixed in 1.6.1. - Fixed in 1.6.1 (released Sep 27, 2026, 39 days before disclosure). - The latest release, 1.6.1, is not affected. ### [CVE-2026-100846](https://cve.now/CVE-2026-100846): MONAI before 1.5.2 Remote Code Execution via Pickle Deserialization - Severity: High 8.8 - Published: Sep 27, 2026 - Affected: fixed in 1.6.0; fixed in 1.5.2. - Fixed in 1.6.0 (released Jun 22, 2026, 97 days before disclosure). - The latest release, 1.6.1, is not affected. ### [CVE-2026-100845](https://cve.now/CVE-2026-100845): MONAI before 1.6.0 Remote Code Execution via NumpyReader - Severity: High 8.5 - Published: Sep 27, 2026 - Affected: fixed in 1.6.0. - Fixed in 1.6.0 (released Jun 22, 2026, 97 days before disclosure). - The latest release, 1.6.1, is not affected. ### [CVE-2026-100844](https://cve.now/CVE-2026-100844): MONAI before 1.6.0 OS Command Injection via dataset\_name\_or\_id - Severity: High 8.6 - Published: Sep 27, 2026 - Affected: fixed in 1.6.0. - Fixed in 1.6.0 (released Jun 22, 2026, 97 days before disclosure). - The latest release, 1.6.1, is not affected. ### [CVE-2026-100843](https://cve.now/CVE-2026-100843): MONAI before 1.6.0 Remote Code Execution via algo\_from\_pickle - Severity: High 8.5 - Published: Sep 27, 2026 - Affected: fixed in 1.6.0. - Fixed in 1.6.0 (released Jun 22, 2026, 97 days before disclosure). - The latest release, 1.6.1, is not affected. ### [CVE-2026-100842](https://cve.now/CVE-2026-100842): MONAI through 1.6.0 \_get\_fake\_spatial\_shape eval() Sandbox Bypass via Attribute Chains - Severity: High 7.3 - Published: Sep 27, 2026 - Affected: fixed in 1.6.1rc0. - Fixed in 1.6.1rc0 (released Sep 18, 2026, 9 days before disclosure). - The latest release, 1.6.1, is not affected. ### [CVE-2026-100841](https://cve.now/CVE-2026-100841): MONAI through 1.6.0 PersistentDataset Remote Code Execution via Pickle Cache - Severity: High 8.5 - Published: Sep 27, 2026 - Affected: through 1.6.0-NA. ### [CVE-2026-100840](https://cve.now/CVE-2026-100840): MONAI through 1.6.0 Remote Code Execution via bundle configuration - Severity: High 8.5 - Published: Sep 27, 2026 - Affected: fixed in 1.6.1rc0. - Fixed in 1.6.1rc0 (released Sep 18, 2026, 9 days before disclosure). - The latest release, 1.6.1, is not affected. ### [CVE-2026-21851](https://cve.now/CVE-2026-21851): MONAI has Path Traversal (Zip Slip) in NGC Private Bundle Download - Severity: Medium 5.3 - Published: Jan 7, 2026 - Affected: fixed in 1.5.2. - Fixed in 1.5.2 (released Jan 27, 2026, 20 days after disclosure). - The latest release, 1.6.1, is not affected. ### [CVE-2025-58757](https://cve.now/CVE-2025-58757): MONAI's unsafe use of Pickle deserialization may lead to RCE - Severity: High 8.8 - Published: Sep 8, 2025 - Affected: fixed in 1.5.1rc1; fixed in 1.5.1. - Fixed in 1.5.1 (released Sep 22, 2025, 14 days after disclosure). - The latest release, 1.6.1, is not affected. ### [CVE-2025-58756](https://cve.now/CVE-2025-58756): MONAI's unsafe torch usage may lead to arbitrary code execution - Severity: High 8.8 - Published: Sep 8, 2025 - Affected: fixed in 1.5.1; fixed in 1.5.1rc1. - Fixed in 1.5.1 (released Sep 22, 2025, 14 days after disclosure). - The latest release, 1.6.1, is not affected. ### [CVE-2025-58755](https://cve.now/CVE-2025-58755): MONAI has path traversal issue that may lead to arbitrary file writes - Severity: High 8.8 - Published: Sep 8, 2025 - Affected: fixed in 1.5.1rc1; fixed in 1.5.1. - Fixed in 1.5.1 (released Sep 22, 2025, 14 days after disclosure). - The latest release, 1.6.1, is not affected. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/pypi/monai Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.