High severity · published Oct 28, 2026
CVE-2026-118683
MONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.conf
New
8.8
CVSS
–
EPSS
No
On KEV
Description
MONAI from 1.2.0 before 1.6.1 contains a remote code execution vulnerability in ConfigWorkflow.__init__, which passes a bundle's configs/logging.conf to logging.config.fileConfig that eval()s handler class and args fields. Attackers can publish a malicious bundle whose logging.conf runs arbitrary Python at workflow construction when a victim loads or runs the bundle.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MO
MONAI · Project-MONAI
1.2.0 before 1.6.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-118683
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-118683
vendor-advisory
https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-wvpx-5qmp-46g3
third-party-advisory
https://www.vulncheck.com/advisories/monai-1.2.0-before-1.6.1-code-execution-via-bundle-configs-logging-conf
More from MONAI
8.8
CVE-2026-100846
MONAI before 1.5.2 Remote Code Execution via Pickle Deserialization
8.8
CVE-2026-100842
MONAI through 1.6.0 _get_fake_spatial_shape eval() Sandbox Bypass via Attribute Chains
8.8
CVE-2025-58757
MONAI's unsafe use of Pickle deserialization may lead to RCE
8.8
CVE-2025-58756
MONAI's unsafe torch usage may lead to arbitrary code execution
8.8
CVE-2025-58755
MONAI has path traversal issue that may lead to arbitrary file writes