{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/monai-1.2.0---1.6.0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:monai:monai:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-118683"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["MONAI (1.2.0 - 1.6.0)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["MONAI"],"content_html":"\u003cp\u003eMONAI versions 1.2.0 through 1.6.0 are vulnerable to remote code execution (CVE-2026-118683). The vulnerability resides in the \u003ccode\u003eConfigWorkflow.__init__\u003c/code\u003e method, which utilizes \u003ccode\u003elogging.config.fileConfig\u003c/code\u003e to process a bundle's \u003ccode\u003econfigs/logging.conf\u003c/code\u003e file. This function insecurely evaluates the handler class and arguments fields using \u003ccode\u003eeval()\u003c/code\u003e, allowing attackers to execute arbitrary Python code when a bundle is loaded or initialized.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for arbitrary Python code execution under the context of the user or service running the MONAI workflow. This may lead to full system compromise depending on the privileges of the MONAI process.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate all instances of MONAI to version 1.6.1 or later immediately.\u003c/li\u003e\n\u003cli\u003eImplement strict validation of \u003ccode\u003elogging.conf\u003c/code\u003e files within bundles if an upgrade is not immediately possible.\u003c/li\u003e\n\u003cli\u003eScan existing model bundle repositories for \u003ccode\u003elogging.conf\u003c/code\u003e files that contain unconventional handler class or argument definitions.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-28T20:38:59Z","date_published":"2026-10-28T20:38:59Z","id":"https://feed.craftedsignal.io/briefs/2026-10-monai-rce-c321a0ee/","summary":"An insecure call to eval() within the MONAI ConfigWorkflow.__init__ method allows for remote code execution when a victim loads a malicious bundle containing a crafted logging.conf file.","title":"MONAI: Remote Code Execution via logging configuration (CVE-2026-118683)","url":"https://feed.craftedsignal.io/briefs/2026-10-monai-rce-c321a0ee/"}],"language":"en","title":"CraftedSignal Threat Feed - MONAI (1.2.0 - 1.6.0)","version":"https://jsonfeed.org/version/1.1"}