CVE-2026-109361GHSA-8f32-8649-rv87
MONAI 1.2.0 before 1.6.1 Insecure Deserialization RCE via nnUNetV2Runner postprocessing_file Path
Project-MONAI MONAI
CVSS
7.0HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.23%Chance of exploitation activity in the next 30 days, higher than 13% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 1.6.1MONAICVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
MONAI 1.2.0 before 1.6.1 contains an insecure deserialization vulnerability in nnUNetV2Runner that unpickles the postprocessing_file path read from inference_information.json without confining it to the results directory. Attackers who can modify inference_information.json can point it at a malicious pickle elsewhere on the filesystem to execute code when predict_ensemble_postprocessing runs.
Text from CVE List
Affected versions 2
- MONAIaffected: 1.2.0 before 1.6.1CVE List
- MONAIunaffected: 1.6.1CVE List
References 3
- github.com/Project-MONAI/MONAI/commit/08576205c4de3c214976294d1dec8f7b2e78cdb9Fixvia CVE List
- github.com/Project-MONAI/MONAI/security/advisories/GHSA-8f32-8649-rv87Advisoryvia CVE List
- vulncheck.com/advisories/monai-1.2.0-before-1.6.1-insecure-deserialization-rce-via-nnunetv2runner-postprocessing-file-pathAdvisoryvia CVE List