PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-109360 Project-MONAI CVE debrief

MONAI 0.4.0 before 1.6.1 contains a remote code execution vulnerability that allows on-path attackers to execute code by tampering with SENet pretrained weights fetched over plaintext HTTP. This vulnerability is particularly concerning because it can be exploited by attackers who have the ability to intercept and modify traffic between the MONAI system and the server hosting the pretrained weights. Defenders should be aware of the potential for this vulnerability to be exploited in environments where the MONAI system is exposed to untrusted networks or where there is a risk of on-path attacks.

Vendor
Project-MONAI
Product
MONAI
CVSS
HIGH 7.7
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-12
Original CVE updated
2026-10-12
Advisory published
2026-10-12
Advisory updated
2026-10-12

Who should care

Defenders responsible for MONAI deployments should assess exposure and prioritize verification of MONAI versions and secure HTTP connections for pretrained weights. This includes reviewing the current MONAI version, identifying potential vulnerabilities, and implementing necessary security measures to prevent exploitation. Additionally, security teams should be aware of the potential risks associated with this vulnerability and take proactive steps to rem

Why it matters

Defenders should prioritize verifying MONAI versions and ensuring secure HTTP connections for pretrained weights to prevent code execution.

  • Verify MONAI version and ensure secure HTTP connections for pretrained weights to prevent code execution.
  • Update MONAI to version 1.6.1 or later to patch the vulnerability.
  • Implement secure protocols for fetching pretrained weights to prevent tampering.

Technical summary

The vulnerability allows on-path attackers to execute code by tampering with SENet pretrained weights fetched over plaintext HTTP. This is possible because MONAI 0.4.0 before 1.6.1 load_state_dict_from_url unpickles without weights_only=True, executing code when SEResNet50 or other SENet models are constructed with pretrained=True. The issue arises from the insecure way MONAI handles pretrained weights, which can be exploited by attackers to gain control of the system. To mitigate this vulnerability, it is essential to ensure that secure protocols are used for fetching pretrained weights and that the MONAI system is updated to a version that supports secure weight loading.

Defensive priority

Defenders should prioritize verifying MONAI versions and ensuring secure HTTP connections for pretrained weights.

Recommended defensive actions

  • Verify MONAI version and ensure secure HTTP connections for pretrained weights
  • Update MONAI to version 1.6.1 or later
  • Implement secure protocols for fetching pretrained weights
  • Review compensating controls for exposed systems while remediation is scheduled and verified
  • Check relevant monitoring, detection, and logs for exposed assets that need extra review
  • Track exceptions, retest remediated assets, and close the item only after evidence is documented
  • Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The vulnerability allows on-path attackers to execute code by tampering with SENet pretrained weights fetched over plaintext HTTP. This is possible because MONAI 0.4.0 before 1.6.1 load_state_dict_from_url unpickles without weights_only=True, executing code when SEResNet50 or other SENet models are constructed with pretrained=True.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-109360 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-109360

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-109360 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-109360

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • MONAI 0.4.0 before 1.6.1 RCE via SENet Pretrained Weights Over Plaintext HTTP

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109360.json

    cve_program_cvelist_v5

  • Source reference

    Unverified legacy reference

    URL: https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-vm9c-7j6g-c7mm

    Supplemental source - vendor-advisory

  • Source reference

    Unverified legacy reference

    URL: https://www.vulncheck.com/advisories/monai-0.4.0-before-1.6.1-rce-via-senet-pretrained-weights-over-plaintext-http

    Supplemental source - third-party-advisory

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.