MONAI 0.4.0 before 1.6.1 contains a remote code execution vulnerability that allows on-path attackers to execute code by tampering with SENet pretrained weights fetched over plaintext HTTP. Attackers can substitute a crafted .pth file that load_state_dict_from_url unpickles without weights_only=True, executing code when SEResNet50 or other SENet models are constructed with pretrained=True.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Attack Requirements
Present
Additional conditions required
Privileges Required
None
No privileges needed
User Interaction
Passive
Minimal interaction
Impact Assessment
Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
High
Complete denial of service
CVSS Vector v4.0
Weakness Type (CWE)
Vulnerable Products 1
| Configuration | From (including) | Up to (excluding) |
|---|---|---|
|
Project-Monai Monai
cpe:2.3:a:project-monai:monai:*:*:*:*:*:*:*:*
|
0.4.0
|
1.6.1
|
References 2
https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-vm9c-7j6g-c7mm
GitHub Security Advisory (GHSA-vm9c-7j6g-c7mm)
https://www.vulncheck.com/advisories/monai-0.4.0-before-1.6.1-rce-via-senet-pre…
VulnCheck Advisory: MONAI 0.4.0 before 1.6.1 RCE via SENet Pretrained Weights Over Plaintext HTTP