MONAI (1.2.0 - 1.6.0) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/monai-1.2.0---1.6.0/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 28 Oct 2026 20:38:59 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgMONAI: Remote Code Execution via logging configuration (CVE-2026-118683)https://feed.craftedsignal.io/briefs/2026-10-monai-rce-c321a0ee/Wed, 28 Oct 2026 20:38:59 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-monai-rce-c321a0ee/An insecure call to eval() within the MONAI ConfigWorkflow.__init__ method allows for remote code execution when a victim loads a malicious bundle containing a crafted logging.conf file.MONAI versions 1.2.0 through 1.6.0 are vulnerable to remote code execution (CVE-2026-118683). The vulnerability resides in the ConfigWorkflow.__init__ method, which utilizes logging.config.fileConfig to process a bundle's configs/logging.conf file. This function insecurely evaluates the handler class and arguments fields using eval(), allowing attackers to execute arbitrary Python code when a bundle is loaded or initialized.

Impact

Successful exploitation allows for arbitrary Python code execution under the context of the user or service running the MONAI workflow. This may lead to full system compromise depending on the privileges of the MONAI process.

Recommendation

  • Update all instances of MONAI to version 1.6.1 or later immediately.
  • Implement strict validation of logging.conf files within bundles if an upgrade is not immediately possible.
  • Scan existing model bundle repositories for logging.conf files that contain unconventional handler class or argument definitions.
]]>highadvisory