Skip to content

CVE record · 1 source

CVE-2026-118683

CVSS 8.8

MONAI from 1.2.0 before 1.6.1 contains a remote code execution vulnerability in ConfigWorkflow.init, which passes a bundle's configs/logging.conf…

Vendor: Project-MONAI
Product: MONAI
CVSS v3.1: 8.8 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-94

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

12

CVE NVD 3d ago

MONAI from 1.2.0 before 1.6.1 contains a remote code execution vulnerability in ConfigWorkflow.__init__, which passes a bundle's configs/logging.conf…

MONAI from 1.2.0 before 1.6.1 contains a remote code execution vulnerability in ConfigWorkflow.__init__, which passes a bundle's configs/logging.conf to logging.config.fileConfig that eval()s handler class and args fields.…

CVSS 8.8 CVE-2026-118683 Project-MONAI