{"schema":"threatline.record/2","record":{"id":"CVE-2026-118683","aliases":["GHSA-wvpx-5qmp-46g3"],"summary":"MONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.conf","details":"MONAI from 1.2.0 before 1.6.1 contains a remote code execution vulnerability in ConfigWorkflow.__init__, which passes a bundle's configs/logging.conf to logging.config.fileConfig that eval()s handler class and args fields. Attackers can publish a malicious bundle whose logging.conf runs arbitrary Python at workflow construction when a victim loads or runs the bundle.","categories":["Unclassified"],"product":"MONAI","vendor":"Project-MONAI","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-118683","source_modified_at":"2026-10-28T18:59:53.203Z","fetched_at":"2026-10-28T20:58:01.013507Z","product":"MONAI","vendor":"Project-MONAI","versions":[{"version":"1.2.0","status":"affected","versionType":"semver","lessThan":"1.6.1"},{"version":"1.6.1","status":"unaffected","versionType":"semver"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-118683","source_modified_at":"2026-10-28T18:59:53.203Z","fetched_at":"2026-10-28T20:58:01.013507Z","package":{"name":"MONAI","ecosystem":null},"version":"1.6.1","basis":"first unaffected version stated in the CVE record"}],"cvss":8.6,"severity":"High","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-28T18:59:53.203Z","modified_at":"2026-10-28T18:59:53.203Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-118683","fetched_at":"2026-10-28T20:58:01.013507Z","source_modified_at":"2026-10-28T18:59:53.203Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-wvpx-5qmp-46g3","tags":["vendor-advisory"]},{"source":"CVE List","url":"https://www.vulncheck.com/advisories/monai-1.2.0-before-1.6.1-code-execution-via-bundle-configs-logging-conf","tags":["third-party-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-28T18:59:53.203Z","content_hash":"fc53c14eb2b041aa1ac1b2172e63dc0bb9d2fe4531b4bebf9ce6fe94352d9ab1"}}