CVE-2026-100845
Last modified
CVE-2026-100845 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allow_pickle=True when loading .npy and .npz files. Attackers can craft malicious .npy files with pickle payloads that execute arbitrary code when loaded through MONAI's standard data pipeline.. EPSS estimates a 0.14% chance of exploitation in the next 30 days.
Description
MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allow_pickle=True when loading .npy and .npz files. Attackers can craft malicious .npy files with pickle payloads that execute arbitrary code when loaded through MONAI's standard data pipeline.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Project-Monai | Monai | < 1.6.0 |
References
- https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-wg9g-w2j2-8pgrExploit, Vendor Advisory
- https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-wg9g-w2j2-8pgrExploit, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-100845?
How severe is CVE-2026-100845?
How do I fix CVE-2026-100845?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-100839Contrast is a confidential-computing runtime for Kubernetes.…8.4
- CVE-2026-100840MONAI through 1.6.0 contains a remote code execution vulnera…7.8
- CVE-2026-100841In MONAI 1.6.0, PersistentDataset (monai/data/dataset.py) ex…7.8
- CVE-2026-100842MONAI through 1.6.0 contains an eval injection vulnerability…8.8
- CVE-2026-100843MONAI versions before 1.6.0 contain a remote code execution …7.8
- CVE-2026-100844MONAI before 1.6.0 is vulnerable to OS command injection in …7.8
- CVE-2026-100846MONAI before 1.5.2 contains a deserialization of untrusted d…8.8
- CVE-2026-100847AzuraCast before 0.23.8 contains a DQL injection vulnerabili…7.5
- CVE-2026-100848AzuraCast (Composer package azuracast/azuracast) before 0.23…7.1
- CVE-2026-100849AzuraCast is a self-hosted web radio management suite. In Az…7.1
- CVE-2026-10085Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.1…5.4
- CVE-2026-100850AzuraCast before 0.23.8 contains a server-side request forge…7.7
Are you affected by CVE-2026-100845?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST