CVE-2026-48705

validated

GHSA-6hp3-vr39-rqw8 ↗

check availablenot proven exploitable

awaiting cvepublic poc−5h32mkev

pip:monai < 1.6.1

fixed in 1.6.1

ETK-2026-2765, permanent identifier

pkg:pypi/monai

cvss9.3cna vendorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L

−4h44mTTV

19mAI analysis

Check if you are vulnerable

timeline

0 = cve.org, not yet published

trigger signal −5h32mpublic poc−5h32mcheck available−4h44magent stopped

−4h

−2h

description

MONAI versions before 1.6.1 may process DICOM spatial metadata containing non-finite values without rejecting it. An attacker able to submit DICOM files to an exposed MONAILabel service may disrupt inference or cause incorrect inference output; default unauthenticated API access increases exposure.

mitigation

Upgrade monai to version 1.6.1 or later. Until the upgrade is complete, limit DICOM upload and inference API access to trusted clients.

fixed in 1.6.1

check

available

exploit

automation

contextual

auth required

EPSS

–

agent run time

19m

cve.org record, t = 0

not published yet

Δ to public poc

−5h32m

Δ to kev

–

outcome

Contextual check: a technique exists and was validated, but no deterministic check could cover this one.

source signals

Public signals that triggered or updated the pipeline. These are inputs for the deltas above.

2026-10-27 13:30Z
ghsa: trigger signal, started the run
https://github.com/advisories/GHSA-6hp3-vr39-rqw8
2026-10-27 13:30Z
public poc
https://github.com/advisories/GHSA-6hp3-vr39-rqw8

this entry in the feed

GET /api/v1/feed/CVE-2026-48705

{
  "etk_id": "ETK-2026-2765",
  "cve_id": "CVE-2026-48705",
  "display_id": "CVE-2026-48705",
  "ghsa_id": "GHSA-6hp3-vr39-rqw8",
  "euvd_id": null,
  "status": "published",
  "anchor_state": "awaiting_cve",
  "title": "Improper DICOM metadata validation in MONAI",
  "summary": "MONAI versions before 1.6.1 may process DICOM spatial metadata containing non-finite values without rejecting it. An attacker able to submit DICOM files to an exposed MONAILabel service may disrupt inference or cause incorrect inference output; default unauthenticated API access increases exposure.",
  "mitigation": "Upgrade monai to version 1.6.1 or later. Until the upgrade is complete, limit DICOM upload and inference API access to trusted clients.",
  "vendor": "pip",
  "product": "pip:monai",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "< 1.6.1"
      ],
      "ecosystem": "pip",
      "fixed_versions": [
        "1.6.1"
      ],
      "package_name": "monai",
      "purl": "pkg:pypi/monai"
    }
  ],
  "cwes": null,
  "cvss_score": 9.3,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": true,
  "check_confidence_basis": "assessed",
  "exploit": false,
  "pipeline_minutes": 18.990380683333335,
  "t0_at": null,
  "signals": {
    "check": {
      "at": "2026-10-27T14:18:30.169819+00:00",
      "days": -0.1972296601736111,
      "is_lower_bound": true,
      "measured_at": "2026-10-27T19:02:30.848168+00:00",
      "url": null
    },
    "public_poc": {
      "at": "2026-10-27T13:30:10+00:00",
      "days": -0.23079644048611112,
      "is_lower_bound": true,
      "measured_at": "2026-10-27T19:02:30.848168+00:00",
      "url": "https://github.com/advisories/GHSA-6hp3-vr39-rqw8"
    },
    "trigger_signal": {
      "at": "2026-10-27T13:30:10+00:00",
      "days": -0.23079644048611112,
      "is_lower_bound": true,
      "measured_at": "2026-10-27T19:02:30.848168+00:00",
      "url": "https://github.com/advisories/GHSA-6hp3-vr39-rqw8"
    }
  }
}

published 2026-10-27 13:59Z
last change 2026-10-27 18:41Z

Need the technical details behind an entry?

Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.