Vulnerability details
CVE-2025-58757
Project-MONAI MONAI
MONAI's unsafe use of Pickle deserialization may lead to RCE
CVSS 3.1
8.8High
Official description
MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. In versions up to and including 1.5.0, the `pickle_operations` function in `monai/data/utils.py` automatically handles dictionary key-value pairs ending with a specific suffix and deserializes them using `pickle.loads()` . This function also lacks any security measures. The deserialization may lead to code execution. As of time of publication, no known fixed versions are available.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.8High | 3.1 | CVEProject cvelistV5 (CNA) (GitHub_M) | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Project-MONAI | MONAI | <= 1.5.0 | CVEProject cvelistV5 (CNA) |
References and advisories
1- https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-p8cm-mm2v-gwjm x_refsource_CONFIRM
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-09-09
- Last updated
- 2025-09-09
- State
- Published
- Assigner (CNA)
- GitHub_M
Exploit prediction (EPSS)
0.64%
Probability of exploitation in 30 days
51.1%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- Proof of concept
- Technical impact
- Total
Weaknesses (CWE)
- CWE-502Deserialization of Untrusted Data