HighVulnerability
CVE-2025-58756: MONAI insecure checkpoint loading enables deserialization code execution
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2025-58756
- Published
- Record updated
- Affected
- monai <= 1.5.0
- Fixed in
- 1.5.1
- released September 22, 2025, 13 days after disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.8%
Summary
MONAI, an AI toolkit for health care imaging, versions up to and including 1.5.0, is affected by CVE-2025-58756. Although `torch.load` with `weights_only=True` is used safely in monai/bundle/scripts.py, insecure loading methods remain elsewhere in the project, such as when loading checkpoints. Loading a checkpoint containing malicious content can trigger a deserialization vulnerability and lead to code execution.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- MediumResearchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak ToolkitSimilar attack · The Hacker News
- InfoTop agent skill security resources — November 2026Similar attack · Adversa AI Blog
- HighCVE-2026-118627: MLflow SHAP load_explainer untrusted deserialization enables code executionSimilar attack · NVD/CVE Database
- HighCVE-2026-118623: MLflow PickleEvaluationArtifact remote code execution via untrusted pickleSimilar attack · NVD/CVE Database
- HighCVE-2026-88968: Claude Code Edit tool symlink race overwrites files outside workspace on macOSSimilar attack · NVD/CVE Database