CVE-2026-100845: Project-Monai Monai

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allow_pickle=True when loading .npy and .npz files. Attackers can craft malicious .npy files with pickle payloads that execute arbitrary code when loaded through MONAI's standard data pipeline.

Affected products

• Project-Monai Monai: before 1.6.0 (fixed in 1.6.0)

Published 2026-09-27. Last modified 2026-09-30.