CVE-2025-58757 — MONAI's unsafe use of Pickle deserialization may lead to RCE
MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. In versions up to and including 1.5.0, the `pickle_operations` function in `monai/data/utils.py` au…
Published: 2025-09-08 · CVSS: 8.8 · CVSS 3.1
MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. In versions up to and including 1.5.0, the `pickle_operations` function in `monai/data/utils.py` automatically handles dictionary key-value pairs ending with a specific suffix and deserializes them using `pickle.loads()` . This function also lacks any security measures. The deserialization may lead to code execution. As of time of publication, no known fixed versions are available.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7