{"schema":"threatline.record/2","record":{"id":"CVE-2026-100845","aliases":["GHSA-wg9g-w2j2-8pgr","PYSEC-2026-4020"],"summary":"MONAI before 1.6.0 Remote Code Execution via NumpyReader","details":"MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allow_pickle=True when loading .npy and .npz files. Attackers can craft malicious .npy files with pickle payloads that execute arbitrary code when loaded through MONAI's standard data pipeline.","categories":["Libraries & packages"],"product":"MONAI","vendor":"Project-MONAI","ecosystem":"PyPI","affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100845","source_modified_at":"2026-09-28T13:56:50.879Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"MONAI","vendor":"Project-MONAI","versions":[{"lessThan":"1.6.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"1.6.0","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-wg9g-w2j2-8pgr","source_modified_at":"2026-10-01T09:25:45.077960803Z","fetched_at":"2026-10-23T18:55:00.935475Z","package":{"name":"monai","ecosystem":"PyPI","purl":"pkg:pypi/monai"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0"}]}],"versions":["0.0.1","0.1.0","0.2.0","0.3.0","0.4.0","0.5.0","0.5.1","0.5.2","0.5.3","0.6.0","0.7.0","0.8.0","0.8.1","0.9.0","0.9.1","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.3.2","1.3.2rc1","1.3.3rc1","1.4.0","1.4.0rc1","1.4.0rc10","1.4.0rc11","1.4.0rc12","1.4.0rc2","1.4.0rc3","1.4.0rc4","1.4.0rc5","1.4.0rc6","1.4.0rc7","1.4.0rc8","1.4.0rc9","1.4.1rc1","1.5.0","1.5.0rc1","1.5.1","1.5.2","1.5.2rc1"]}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100845","source_modified_at":"2026-09-28T13:56:50.879Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"MONAI","ecosystem":null},"version":"1.6.0","basis":"first unaffected version stated in the CVE record"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-wg9g-w2j2-8pgr","source_modified_at":"2026-10-01T09:25:45.077960803Z","fetched_at":"2026-10-23T18:55:00.935475Z","package":{"name":"monai","ecosystem":"PyPI","purl":"pkg:pypi/monai"},"version":"1.6.0"}],"cvss":8.5,"severity":"High","kev":{"listed":false},"epss":{"probability":0.00144,"percentile":0.03345,"score_date":"2026-10-23"},"published_at":"2026-09-27T01:28:40.337Z","modified_at":"2026-10-01T09:25:45.077960803Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-100845","fetched_at":"2026-10-23T18:52:38.922436Z","source_modified_at":"2026-09-28T13:56:50.879Z"},{"source":"OSV","url":"https://osv.dev/vulnerability/GHSA-wg9g-w2j2-8pgr","fetched_at":"2026-10-23T18:55:00.935475Z","source_modified_at":"2026-10-01T09:25:45.077960803Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-100845","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","OSV","EPSS"],"references":[{"source":"CVE List","url":"https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-wg9g-w2j2-8pgr","tags":["exploit"]},{"source":"CVE List","url":"https://www.vulncheck.com/advisories/monai-before-1.6.0-remote-code-execution-via-numpyreader","tags":["third-party-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"poc","automatable":"no","technical_impact":"total","assessed_at":"2026-09-28T13:56:28.228012Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"ecosystem","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-01T09:25:45.077960803Z","content_hash":"c1bf952ee87d13a2dfc72826d7c223ed11e7c3d0621171b27513ba925c9efb78"}}