CVE-2026-48705

MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. Prior to 1.6.1, PydicomReader._get_affine() trusts non-finite values in the DICOM PixelSpacing, ImagePositionPatient, and ImageOrientationPatient fields and composes them into an affine matrix without validation. An unauthenticated attacker who can upload a crafted DICOM to a default MONAILabel deployment can propagate NaN or infinity values through LoadImaged, Spacingd, model inference, and output writing, causing inference failures, persistent datastore poisoning, or geometrically corrupted results. This issue is fixed in version 1.6.1.

• CWE-20
• CWE-682

• https://github.com/Project-MONAI/MONAI/commit/434c094a3e6b84cca5b6e81da51e0d18a0100607
• https://github.com/Project-MONAI/MONAI/pull/9087
• https://github.com/Project-MONAI/MONAI/releases/tag/1.6.1
• https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-6hp3-vr39-rqw8

Published

Nov 5, 2026

Last Modified

Nov 5, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-48697FastNetMon Community Edition through 1.2.9 does not verify T…7.4
• CVE-2026-4870IBM Qiskit SDK 0.43.0 through 2.5.0 could allow an attacker …7.5
• CVE-2026-48700An issue was discovered in all versions of PCManFM-Qt starti…9.3
• CVE-2026-48702Rekor is a software supply chain transparency log. Starting …7.5
• CVE-2026-48703Warp is an agentic development environment. From 0.2025.04.0…7.8
• CVE-2026-48704Warp is an agentic development environment. From 0.2023.10.2…8.8
• CVE-2026-48706Envoy is an open source edge and service proxy designed for …7.5
• CVE-2026-48707InstantCMS is a free and open source content management syst…3.1
• CVE-2026-48708OliveTin gives access to predefined shell commands from a we…7.5
• CVE-2026-48709OliveTin gives access to predefined shell commands from a we…3.7
• CVE-2026-4871The Sports Club Management plugin for WordPress is vulnerabl…6.4
• CVE-2026-48710Starlette is a lightweight ASGI framework/toolkit. Prior to …6.5