CVE-2026-48705: MONAI PydicomReader affine computation accepts non-finite DICOM values

Summary

MONAI, an AI toolkit for healthcare imaging, has a flaw in PydicomReader._get_affine() prior to 1.6.1: it accepts non-finite values in the DICOM PixelSpacing, ImagePositionPatient, and ImageOrientationPatient fields and builds an affine matrix from them without validation. An unauthenticated attacker who can upload a crafted DICOM to a default MONAILabel deployment can propagate NaN or infinity values through LoadImaged, Spacingd, model inference, and output writing. The result is inference failures, persistent datastore poisoning, or geometrically corrupted results.

Mitigation

Fixed in version 1.6.1.

Related items

• InfoSigned but Steerable: Measuring and Closing the Text-Vector Integrity Gap in Offline Retrieval-Augmented GenerationSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• LowCloakFEM: Agentic FEM Code Generation for Red-Teaming Computational Resource ExhaustionSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• MediumThe Rise of LLMJacking: How Threat Actors Monetize Compromised Cloud and Model ResourcesSimilar attack · Google Threat Intelligence
• InfoSecuring next-generation edge intelligence: A survey from federated learning to autonomous agents in cyber-physical systemsSimilar attack · OpenAlex (peer-reviewed AI security)
• InfoThe Blind Spots of Detection: Adversarial Perturbation Attacks against Watchdogs in Distributed LLM InferenceSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)