MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)

monai

An unauthenticated remote attacker can crash a running MONAILabel server or silently corrupt its medical AI inference results by uploading a single crafted DICOM file (~132 KB) via the REST API.

Do this now

Upgrade MONAILabel to monai 1.6.1, the fixed version, and restrict REST API uploads until the upgrade is done.

Fix it

Upgrade to monai 1.6.1

First seen: 27 Oct 2026
Last update: 27 Oct 2026, 14:17 UTC
Fixed in: monai 1.6.1
Identifiers: CVE-2026-48705 ID not published yet
Source: GitHub advisory

Check this repository for exposure to one security incident from pwned.coffee. Report first, change nothing until I say so.

## MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)
Severity: critical. Patch status: patched.
Affected: monai
Fixed in: monai 1.6.1
Ids: CVE-2026-48705

An unauthenticated remote attacker can crash a running MONAILabel server or silently corrupt its medical AI inference results by uploading a single crafted DICOM file (~132 KB) via the REST API.

## Steps
1. Search the repo, its CI and infra config for monai. If present, report the version in use and whether it's affected.
2. Fix by release line: monai: 1.6.1.

## Fix by release line
| Line | State | Fix | Until then |
|---|---|---|---|
| monai | fixed | 1.6.1 | — |

## Report
A table: file, product or package, version in use, affected yes/no, exact fix. Then anything a human has to check outside the repo.

If you have the pwned.coffee MCP server (https://pwned.coffee/mcp), call lookup_cve("CVE-2026-48705") for the latest, and check_repo with this repo's lockfiles, Dockerfiles and workflows for a full receipt.
Sources: https://github.com/Project-MONAI/MONAI/commit/434c094a3e6b84cca5b6e81da51e0d18a0100607 https://github.com/Project-MONAI/MONAI/releases/tag/1.6.1 https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-6hp3-vr39-rqw8 https://github.com/advisories/GHSA-6hp3-vr39-rqw8
https://pwned.coffee/i/monailabel-server-crash-and-silent-inference-corruption-cve-2026-48705

Receipt

Exploitation: No known exploitation
Fix by release line: Product Affected Fixed in Source
monai before 1.6.1 1.6.1 Reported checked 27 Oct
Score: GitHub advisory rating: critical. No CVSS published.
Last checked: 27 Oct 2026, 15:18 UTC

Product	Affected	Fixed in	Source
monai	before 1.6.1	1.6.1	Reported checked 27 Oct

Sources: KEV – CVE record – Vendor –

Sources

Wrong fix version, or a source we missed? Send it back to chef@pwned.coffee with the source, and we'll correct it here.

Totalone very hot coffee