Live › vulnerability › CVE-2026-118684
Go to dashboardMONAI versions before 1.6.1 have a check_hash() function that returns True without verifying anything when no expected hash is supplied. An attacker who can intercept downloads or compromise a registry can swap in malicious bundles, datasets, or model archives that are then accepted, which can lead to code execution.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 19:34 UTC. All times on this page are UTC.
Teams using MONAI to download bundles, datasets, or model archives without supplying hashes are exposed, because the integrity check does nothing in that case. Systems that only load local, already-trusted files or always pass a verified hash are less exposed. Users on 1.6.1 or later are not affected.
No product ranges from the sources yet.
pip show monai and confirm the installed version is below 1.6.1check_hash( or download helpers invoked without a hash_val argument1.6.1 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
MONAI before 1.6.1 contains an insufficient integrity verification vulnerability in check_hash() that silently returns True when hash_val is None, with MD5 as the default hash type. Attackers performing man-in-the-middle or registry compromise can substitute bundles, datasets, or model archives downloaded without hashes, enabling malicious file delivery and potential code execution.
This page as .md · .json · in your agent: get_signal("CVE-2026-118684")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.