---
id: "CVE-2026-118683"
kind: "vulnerability"
aliases: ["CVE-2026-118683"]
title: "MONAI: malicious bundle's logging config runs arbitrary Python on load"
severity: "high"
cvss: 8.8
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["medical-imaging", "ml-pipelines", "monai", "package", "python"]
not_affected_if: ["default-config"]
published_at: "2026-10-28T19:17:35+00:00"
first_seen_at: "2026-10-28T19:34:55+00:00"
updated_at: "2026-10-28T19:35:42+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-118683", "first_seen_at": "2026-10-28T19:34:55+00:00"}]
---

# MONAI: malicious bundle's logging config runs arbitrary Python on load

MONAI versions 1.2.0 through 1.6.0 pass a bundle's configs/logging.conf to Python's logging.config.fileConfig, which evaluates handler class and argument fields as code. An attacker who publishes a malicious bundle gets arbitrary Python execution on the machine of anyone who loads or runs it.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed MONAI version with `python -c "import monai; print(monai.__version__)"`; versions below `1.6.1` are in range.
- Inspect any third-party bundle's `configs/logging.conf` for unexpected `eval`-style handler or args values.

## Fix

- Upgrade MONAI to `1.6.1` or later.
- Only load bundles from trusted sources until upgraded.

## Timeline

- 2026-10-28T19:34:55+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-118683

## From the sources

MONAI from 1.2.0 before 1.6.1 contains a remote code execution vulnerability in ConfigWorkflow.__init__, which passes a bundle's configs/logging.conf to logging.config.fileConfig that eval()s handler class and args fields. Attackers can publish a malicious bundle whose logging.conf runs arbitrary Python at workflow construction when a victim loads or runs the bundle.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_