CVE-2026-109361

High

Description

MONAI 1.2.0 before 1.6.1 contains an insecure deserialization vulnerability in nnUNetV2Runner that unpickles the postprocessing_file path read from inference_information.json without confining it to the results directory. Attackers who can modify inference_information.json can point it at a malicious pickle elsewhere on the filesystem to execute code when predict_ensemble_postprocessing runs.

SeverityHigh

CVSS7.3

Exploit probability—

ProductMONAI

PublishedOct 12, 2026

First seenOct 12, 2026

Weakness typeCWE-502Deserialization of untrusted data

How to fix

Update

Project-MONAI MONAI1.6.1 or later

Patches

github.com/Project-MONAI/MONAI/commit/08576205c4de3c214976294d1dec8f7b2e78cdb9

Vendor advisories

github.com/Project-MONAI/MONAI/security/advisories/GHSA-8f32-8649-rv87

Affected products

Product	Affected versions	Fixed in
Project-MONAI MONAI	1.2.0 ≤ v < 1.6.1	1.6.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.