CVE-2026-100845

Name of the Vulnerable Software and Affected Versions MONAI versions prior to 1.6.0

Description The NumpyReader class contains an unsafe deserialization issue. It unconditionally uses the numpy.load function with the allow pickle=True parameter when processing .npy and .npz files. This allows an attacker to provide a specially crafted .npy file containing pickle payloads, which can lead to arbitrary code execution when the file is loaded through the standard data pipeline. Deserialization is the process of converting a data format back into an object, and unsafe deserialization occurs when untrusted data is used to instantiate objects without proper validation.

Recommendations Update to version 1.6.0 or later. As a temporary mitigation, avoid loading untrusted .npy or .npz files using the NumpyReader class.