CVE-2025-58757: MONAI's unsafe use of Pickle deserialization may lead to RCE

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-09-09 · updated 2026-06-17
Weakness: CWE-502

Description

MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. In versions up to and including 1.5.0, the `pickle_operations` function in `monai/data/utils.py` automatically handles dictionary key-value pairs ending with a specific suffix and deserializes them using `pickle.loads()` . This function also lacks any security measures. The deserialization may lead to code execution. As of time of publication, no known fixed versions are available.

Affected products

Monai Medical Open Network For Ai: through 1.5.0

References

https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-p8cm-mm2v-gwjm
https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-p8cm-mm2v-gwjm

Get alerted when CVE-2025-58757 or the next vulnerability affects your stack