Description
MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves _target_ values to arbitrary importable callables without an allow list and passes $ expressions to Python eval(). Attackers can publish a malicious bundle with crafted configuration containing arbitrary code that executes when a victim loads the bundle using monai.bundle.load() or monai.bundle.run().
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Project-MONAI | MONAI | ≤ 1.6.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | monai | < 1.6.1rc0 | 1.6.1rc0 | PYSEC-2026-4015 |
References
- GitHub Security Advisory (GHSA-873f-pvrv-4x83) vendor-advisory
- VulnCheck Advisory: MONAI through 1.6.0 Remote Code Execution via bundle configuration third-party-advisory