CVE-2025-58755 MONAI has path traversal issue that may lead to arbitrary file writes
Attackers can overwrite system files via malicious zip archives in MONAI, potentially leading to arbitrary code execution.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-58755?
CVE-2025-58755 is a high-severity path traversal vulnerability in Project-MONAI MONAI, published on 8 Sep 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. The extractall function `zip_file.extractall(output_dir)` is used directly to process compressed files. It is used in many places in the project. In versions up to and including 1.5.0, when the Zip file containing malicious content is decompressed, it overwrites the system files. In addition, the project allows the download of the zip content through the link, which increases the scope of exploitation of this vulnerability. As of time of publication, no known fixed versions are available.
Weakness: CWE-22
Which versions are affected by CVE-2025-58755?
3 open source packages ship an affected version, including monai. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
monai PyPI | All versions | 1.5.1 |
monai PyPI | All versions | 1.5.1 |
monai PyPI | All versions | 1.5.1rc1 |
Products include Monai Medical Open Network for Ai.
How do I fix CVE-2025-58755?
Upgrade monai to a fixed version for your release line: 1.5.1 or 1.5.1rc1.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2025-58755 being exploited?
There is no known exploitation of CVE-2025-58755 in the wild and no public exploit code.
Other vulnerabilities in Project-MONAI MONAI
Sources
Also known as GHSA-x6ww-pf9m-m73m, PYSEC-2025-140.