GHSA-89gg-p5r5-q6r4: MONAI: Unsafe functions lead to pickle deserialization rce

April 7, 2026 (updated July 31, 2026)

The algo_from_pickle function in monai/auto3dseg/utils.py causes pickle.loads(data_bytes) to be executed, and it does not perform any validation on the input parameters. This ultimately leads to insecure deserialization and can result in code execution vulnerabilities.

References

github.com/Project-MONAI/MONAI/commit/9078a72f3992e49bd4560db510be9ec4ccf972cc
github.com/Project-MONAI/MONAI/issues/8874
github.com/Project-MONAI/MONAI/releases/tag/1.6.0
github.com/Project-MONAI/MONAI/security/advisories/GHSA-89gg-p5r5-q6r4
github.com/advisories/GHSA-89gg-p5r5-q6r4

Code Behaviors & Features

Detect and mitigate GHSA-89gg-p5r5-q6r4 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →