MONAI: Remote Code Execution via logging configuration (CVE-2026-118683)
An insecure call to eval() within the MONAI ConfigWorkflow.__init__ method allows for remote code execution when a victim loads a malicious bundle containing a crafted logging.conf file.
CVE search metadata
CVE search record: CVE-2026-118683. Severity: high. CVSS: 8.8. KEV: no. Product: MONAI (1.2.0 - 1.6.0). Brief: MONAI: Remote Code Execution via logging configuration (CVE-2026-118683). Brief link: https://feed.craftedsignal.io/briefs/2026-10-monai-rce-c321a0ee/
Triage facts
Revision 1- Applicability
- MONAI (1.2.0 - 1.6.0)
- Evidence
- Unknown
- Severity
- High
- Action
- Elevated
- Sources
- 1 public source
- Freshness
- Revision 1Oct 28, 20:38 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A5Likely
MONAI versions 1.2.0 through 1.6.0 are vulnerable to remote code execution (CVE-2026-118683). The vulnerability resides in the ConfigWorkflow.__init__ method, which utilizes logging.config.fileConfig to process a bundle's configs/logging.conf file. This function insecurely evaluates the handler class and arguments fields using eval(), allowing attackers to execute arbitrary Python code when a bundle is loaded or initialized.
Impact
Successful exploitation allows for arbitrary Python code execution under the context of the user or service running the MONAI workflow. This may lead to full system compromise depending on the privileges of the MONAI process.
Recommendation
- Update all instances of MONAI to version 1.6.1 or later immediately.
- Implement strict validation of
logging.conffiles within bundles if an upgrade is not immediately possible. - Scan existing model bundle repositories for
logging.conffiles that contain unconventional handler class or argument definitions.
Immediate actions
Upgrade MONAI to 1.6.1 or later
Threat Hunt
Search for logging.conf files within MONAI bundle directories that define suspicious handler class or arguments
Data: File content inspection of bundle directories
Mitigations
Upgrade to 1.6.1
CVE-2026-118683