GHSA-wvpx-5qmp-46g3: MONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.conf

Published Oct 28, 2026

Updated

MONAI from 1.2.0 before 1.6.1 contains a remote code execution vulnerability in ConfigWorkflow.init, which passes a bundle's configs/logging.conf to logging.config.fileConfig that eval()s handler class and args fields. Attackers can publish a malicious bundle whose logging.conf runs arbitrary Python at workflow construction when a victim loads or runs the bundle.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade MONAI to a version that resolves this vulnerability.
Fixed in 1.6.1

Event History

Oct 28, 2026

CVE Published

via OSV·06:59 PM

Data Sourced

via OSV·06:59 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this vulnerability?

Users of MONAI versions from 1.2.0 up to, but not including, 1.6.1 are exposed when they load or run a bundle supplied by an attacker. The vulnerable path is reached during workflow construction.

What does an attacker need to exploit it?

An attacker needs to publish or otherwise provide a malicious MONAI bundle that the victim loads or runs. Exploitation relies on the bundle's configs/logging.conf containing malicious handler class or args fields.

Does exploitation require authentication or user interaction?

The provided vector indicates no privileges are required and exploitation is network-accessible, but user interaction is required. In practice, a victim must choose to load or run the malicious bundle.

What version resolves the issue?

The issue affects MONAI before version 1.6.1. Upgrading to 1.6.1 or later removes the affected version range described in the advisory.

GHSA-wvpx-5qmp-46g3: MONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.conf

Remediation

Event History

Frequently Asked Questions

Who is exposed to this vulnerability?

What does an attacker need to exploit it?

Does exploitation require authentication or user interaction?

What version resolves the issue?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this vulnerability?

What does an attacker need to exploit it?

Does exploitation require authentication or user interaction?

What version resolves the issue?