# CVE-2025-58755: Project-MONAI MONAI path traversal in ZIP extraction

Source: https://junglewise.ai/threats/cve-2025-58755-project-monai-monai-path-traversal-in-zip-extraction  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-09-09. Updated: 2026-06-06  
License: CC BY 4.0 with a link back

CVE-2025-58755 · Severity: high · CVSS 8.8 · Published 2025-09-09

MONAI, a framework for deep learning in healthcare imaging, is vulnerable to a security flaw when processing compressed files. An attacker can create a specially crafted ZIP file that, when downloaded and extracted by the software, overwrites critical system files or configuration data. This could lead to a complete system takeover, data loss, or the inability to boot the affected computer.

Technologies: [monai (PyPI)](https://junglewise.ai/threats/technologies/monai). Vendors: [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2025-58755 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-58755 being exploited in the wild.

**How severe is CVE-2025-58755?** High severity, with a CVSS score of 8.8, published 9 September 2025.

**Which products and versions are affected?** monai (PyPI) <= 1.5.0, ECOSYSTEM:introduced=0,fixed=1.5.1, ECOSYSTEM:introduced=0,fixed=1.5.1rc1.

**Is there a fix for CVE-2025-58755?** Yes. monai (PyPI): upgrade to 1.5.1, 1.5.1rc1 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2025-58755 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2025-58755?** Check whether you run monai (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- monai (PyPI): upgrade to 1.5.1, 1.5.1rc1 or later

  ```sh
  pip install "monai>=1.5.1rc1"
  ```


## Technical details

A path traversal vulnerability exists in MONAI due to the insecure use of the 'zip_file.extractall()' function. The software fails to validate that the file paths contained within a ZIP archive remain within the intended destination directory. An attacker can exploit this by providing a malicious ZIP file containing filenames with traversal sequences (e.g., '../../'). When a user utilizes the 'monai.bundle.scripts.download' function or other extraction utilities to process such a file, the application will write files to arbitrary locations on the filesystem. This can be used to overwrite sensitive files like '/etc/passwd' or SSH keys. The vulnerability is patched in version 1.5.1.

## Affected products

- Project-MONAI monai <= 1.5.0

## Identifiers

- CVE-2025-58755
- GHSA-x6ww-pf9m-m73m
- PYSEC-2025-140

## Timeline

- 2025-09-08: disclosed
- 2025-09-09: advisory
- 2025-09-09: patched

## References

- [https://api.github.com/users/h3rrr](https://api.github.com/users/h3rrr)
- [https://github.com/h3rrr](https://github.com/h3rrr)
- [https://api.github.com/users/h3rrr/gists%7B/gist_id%7D](https://api.github.com/users/h3rrr/gists%7B/gist_id%7D)
- [https://api.github.com/users/h3rrr/repos](https://api.github.com/users/h3rrr/repos)
- [https://avatars.githubusercontent.com/u/81402797?v=4](https://avatars.githubusercontent.com/u/81402797?v=4)
- [https://api.github.com/users/h3rrr/events%7B/privacy%7D](https://api.github.com/users/h3rrr/events%7B/privacy%7D)

## Related threats

- [MONAI MONAILabel server crash and inference corruption via crafted DICOM](https://junglewise.ai/threats/cve-2026-48705-monailabel-server-crash-and-silent-inference-corruption-via)
- [MONAI unsafe deserialization in algo_from_pickle](https://junglewise.ai/threats/cve-2026-100846-monai-before-1-5-2-contains-a-deserialization-of-untrusted-data)
- [MONAI unsafe deserialization in NumpyReader](https://junglewise.ai/threats/cve-2026-100845-monai-before-1-6-0-contains-an-unsafe-deserialization)
- [MONAI OS command injection in nnUNetV2Runner](https://junglewise.ai/threats/cve-2026-100844-monai-before-1-6-0-is-vulnerable-to-os-command-injection-in-the)
- [MONAI remote code execution in algo_from_pickle](https://junglewise.ai/threats/cve-2026-100843-monai-versions-before-1-6-0-contain-a-remote-code-execution)