CRITICAL 9.3 GitHub

CVE-2026-48705

MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)

### Summary An unauthenticated remote attacker can crash a running MONAILabel server or silently corrupt its medical AI inference results by uploading a single crafted DICOM file (~132 KB) via the REST API. The vulnerability stems from pydicom's lack of validation for Decimal String (DS) and Integer String (IS) DICOM Value Representations, which allows NaN and infinity values to pass through MONAI's PydicomReader and propagate through the entire spatial transform and ML inference pipeline. No

Affected Products

pip/monai < 1.6.1

References

Published: 2026-10-27 · Source: GitHub · Feed updated: 2026-10-27

This critical severity vulnerability with a CVSS score of 9.3 was published on 2026-10-27 via GitHub. Affected: pip/monai < 1.6.1.

Risk Timeline

CVE Disclosed2026-10-27 · -1 days ago

Remediation Resources

GitHub

github.com/advisories/GHSA-6hp3-vr39-rqw8

GitHub

github.com/Project-MONAI/MONAI/security/advisories/GHSA-6hp3-vr39-rqw8

Related Vulnerabilities

CVE	Title	Severity	CVSS
CVE-2026-35002	Agno: Arbitrary code execution via `eval()` on `field_type` in `FunctionCall`	CRITICAL	9.8
CVE-2026-112398	Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execu	CRITICAL	—
CVE-2026-112393	Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO	CRITICAL	—
CVE-2026-112900	Pillow: Argument Injection in Ghostscript call, potentially leading into RCE	CRITICAL	—
CVE-2026-27975	Ajenti has potential Remote Code Execution	HIGH	9.8
CVE-2026-49272	OAuthLib: Bearer token can be retrieved as long as client knows a valid client I	HIGH	8.5

vulnfeed aggregates 18707 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.