Vulnerability · Published Oct 12, 2026 · Assigned by VulnCheck

CVE-2026-109361MONAI 1.2.0 before 1.6.1 Insecure Deserialization RCE via nnUNetV2Runner postprocessing_file Path

High 7.3

In plain English

A high-severity unsafe deserialization in MONAI from Project-MONAI. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).

Severity (CVSS 3.1)7.3High

Exploit odds (30 days)0.2%top 85.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

MONAI 1.2.0 before 1.6.1 contains an insecure deserialization vulnerability in nnUNetV2Runner that unpickles the postprocessing_file path read from inference_information.json without confining it to the results directory. Attackers who can modify inference_information.json can point it at a malicious pickle elsewhere on the filesystem to execute code when predict_ensemble_postprocessing runs.

Affected products (as reported)

Vendor	Product	Versions
Project-MONAI	MONAI	1.2.0 – before 1.6.1

Weakness: CWE-502 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References

GitHub Security Advisory (GHSA-8f32-8649-rv87) vendor-advisory
Patch Commit patch
VulnCheck Advisory: MONAI 1.2.0 before 1.6.1 Insecure Deserialization RCE via nnUNetV2Runner postprocessing_file Path third-party-advisory