Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:monai:monai:*:*:*:*:*:*:*:*

3 briefs RSS
high advisory

MONAI: Remote Code Execution via logging configuration (CVE-2026-118683)

An insecure call to eval() within the MONAI ConfigWorkflow.__init__ method allows for remote code execution when a victim loads a malicious bundle containing a crafted logging.conf file.

MONAI
1t 1c
high advisory

Remote Code Execution in MONAI via Insecure Deserialization of Pretrained Weights

MONAI versions prior to 1.6.1 are vulnerable to remote code execution due to insecure deserialization of pretrained weights fetched over plaintext HTTP.

MONAI +1 vulnerability rce deserialization python remote-code-execution
3t 1c
high advisory

Remote Code Execution in MONAI Bundle Configuration Engine

MONAI versions through 1.6.0 are vulnerable to remote code execution due to insecure deserialization and evaluation of arbitrary Python callables within bundle configuration files.

MONAI +3 remote-code-execution python supply-chain vulnerability deserialization rce code-execution ml-ops +1
2t 1c