MONAI 1.2.0 before 1.6.1 contains an insecure deserialization vulnerability in nnUNetV2Runner that unpickles the postprocessing_file path read from inference_information.json without confining it to the results directory. Attackers who can modify inference_information.json can point it at a malicious pickle elsewhere on the filesystem to execute code when predict_ensemble_postprocessing runs.
Attack Parameters
Attack Vector
Local
Requires local access
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
Low
Basic privileges needed
User Interaction
Passive
Minimal interaction
Impact Assessment
Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
High
Complete denial of service
CVSS Vector v4.0
Weakness Type (CWE)
Vulnerable Products 1
| Configuration | From (including) | Up to (excluding) |
|---|---|---|
|
Project-Monai Monai
cpe:2.3:a:project-monai:monai:*:*:*:*:*:*:*:*
|
1.2.0
|
1.6.1
|
References 3
https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-8f32-8649-rv87
GitHub Security Advisory (GHSA-8f32-8649-rv87)
https://github.com/Project-MONAI/MONAI/commit/08576205c4de3c214976294d1dec8f7b2…
Patch Commit
https://www.vulncheck.com/advisories/monai-1.2.0-before-1.6.1-insecure-deserial…
VulnCheck Advisory: MONAI 1.2.0 before 1.6.1 Insecure Deserialization RCE via nnUNetV2Runner postprocessing_file Path