Is CVE-2025-58756 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-58756 being exploited in the wild.

How severe is CVE-2025-58756?

High severity, with a CVSS score of 8.8, published 9 September 2025.

Which products and versions are affected?

monai (PyPI) <= 1.5.0, ECOSYSTEM:introduced=0,fixed=1.5.1, ECOSYSTEM:introduced=0,fixed=1.5.1rc1.

Is there a fix for CVE-2025-58756?

Yes. monai (PyPI): upgrade to 1.5.1, 1.5.1rc1 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2025-58756 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2025-58756?

Check whether you run monai (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-58756: Project-MONAI MONAI insecure deserialization in CheckpointLoader

Q: Which products and versions are affected?

monai (PyPI) <= 1.5.0, ECOSYSTEM:introduced=0,fixed=1.5.1, ECOSYSTEM:introduced=0,fixed=1.5.1rc1.

Q: Is there a fix for CVE-2025-58756?

Yes. monai (PyPI): upgrade to 1.5.1, 1.5.1rc1 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2025-58756 attacked?

It is attacked over the network, in a software library.

Q: Am I affected by CVE-2025-58756?

Check whether you run monai (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-58756 · Severity: high · CVSS 8.8 · Published 2025-09-09

MONAI, a framework for medical AI, is vulnerable to a security flaw when loading pre-trained models or checkpoints. If a user loads a specially crafted malicious model file, an attacker could execute arbitrary commands on the system. This could lead to full system compromise, data theft, or unauthorized access to sensitive medical research environments.

Technologies: monai (PyPI). Vendors: PyPI.

Quick answers

Is CVE-2025-58756 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-58756 being exploited in the wild.
How severe is CVE-2025-58756?: High severity, with a CVSS score of 8.8, published 9 September 2025.
Which products and versions are affected?: monai (PyPI) <= 1.5.0, ECOSYSTEM:introduced=0,fixed=1.5.1, ECOSYSTEM:introduced=0,fixed=1.5.1rc1.
Is there a fix for CVE-2025-58756?: Yes. monai (PyPI): upgrade to 1.5.1, 1.5.1rc1 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2025-58756 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2025-58756?: Check whether you run monai (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

monai (PyPI): upgrade to 1.5.1, 1.5.1rc1 or later
```
pip install "monai>=1.5.1rc1"
```

Technical details

A deserialization vulnerability exists in MONAI due to the use of 'torch.load' without the 'weights_only=True' parameter in certain components, specifically within the CheckpointLoader handler. While some parts of the project were updated to use secure loading, other areas remain vulnerable to the execution of arbitrary Python code embedded in malicious pickle-based checkpoint files. An attacker can exploit this by providing a crafted checkpoint file that, when loaded by a user or automated process, triggers the '__reduce__' method to execute system commands. This vulnerability is tracked as CVE-2025-58756 and is addressed in version 1.5.1.

Affected products

Project-MONAI monai <= 1.5.0

Identifiers

CVE-2025-58756
GHSA-6vm5-6jv9-rjpj
PYSEC-2025-141

Timeline

2025-09-08: disclosed: Advisory published by Project-MONAI
2025-09-09: advisory: NVD and GitHub Advisory Database entries created
2025-09-09: patched: Fix released in version 1.5.1

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.