CVE-2026-109360 | Project-MONAI Monai up to 1.6.0 Pretrained Weight Loading load_state_dict_from_url pretrained deserialization

October 12, 2026 Yanac

A vulnerability was found in Project-MONAI Monai up to 1.6.0. It has been rated as critical. This vulnerability affects the function load_state_dict_from_url of the component Pretrained Weight Loading. Performing a manipulation of the argument pretrained results in deserialization.

This vulnerability was named CVE-2026-109360. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More