CVE-2026-118683: MONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.conf
MONAI from 1.2.0 before 1.6.1 contains a remote code execution vulnerability in ConfigWorkflow.init, which passes a bundle's configs/logging.conf to logging.config.fileConfig that eval()s handler class and args fields. Attackers can publish a malicious bundle whose logging.conf runs arbitrary Python at workflow construction when a victim loads or runs the bundle.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
MONAIto a version that resolves this vulnerability.Fixed in 1.6.1
Event History
Frequently Asked Questions
Who is exposed to this issue?
Users of MONAI versions from 1.2.0 up to, but not including, 1.6.1 are exposed if they load or run a bundle supplied by an untrusted party. The vulnerable behavior occurs during workflow construction.
What does an attacker need to do to exploit it?
An attacker needs to publish or otherwise provide a malicious MONAI bundle containing a crafted configs/logging.conf file. When a victim loads or runs that bundle, fields in the logging configuration can cause arbitrary Python code to execute.
Is user interaction required?
Yes. Exploitation requires a victim to load or run the attacker-controlled bundle; the attacker does not need prior privileges in the victim environment.
What can be done if upgrading is not immediately possible?
Do not load or run bundles from untrusted sources, and review bundle configs/logging.conf files before workflow construction. In particular, treat handler class and args fields in logging.conf as potentially executable input.