CVE-2026-100840
Received Received - Intake

Remote Code Execution in MONAI Bundle Configuration

Publication date: 2026-09-27

Last updated on: 2026-09-27

Assigner: VulnCheck

Description
MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves _target_ values to arbitrary importable callables without an allow list and passes $ expressions to Python eval(). Attackers can publish a malicious bundle with crafted configuration containing arbitrary code that executes when a victim loads the bundle using monai.bundle.load() or monai.bundle.run().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-27
Last Modified
2026-09-27
Generated
2026-09-27
AI Q&A
2026-09-27
EPSS Evaluated
N/A
NVD
CVE-2026-100840
EUVD
EUVD-2026-87848

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
monai monai to 1.6.0 (inc)
project_monai monai to 1.6.0 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-95 The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call (e.g. "eval").

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-100840 is a remote code execution vulnerability in MONAI versions up to 1.6.0. It occurs in the bundle configuration engine which resolves _target_ values to arbitrary callables without an allow list and evaluates $ expressions using Python's eval(). Attackers can craft malicious bundles that execute arbitrary code when loaded via monai.bundle.load() or monai.bundle.run().

Detection Guidance

Check MONAI version with pip show monai. If version <=1.6.0, the system is vulnerable. Inspect bundle configurations for suspicious _target_ values or $ expressions that may indicate malicious code injection.

Impact Analysis

This vulnerability allows attackers to execute arbitrary code on your system when you load a malicious MONAI bundle. It can lead to full compromise of your system's confidentiality, integrity, and availability. The attack requires user interaction as you must load the malicious bundle.

Compliance Impact

This vulnerability could lead to data breaches, unauthorized access, or system compromise, which may violate GDPR's data protection requirements and HIPAA's security rules. Organizations using MONAI may face compliance violations if exploited.

Mitigation Strategies

Upgrade MONAI to a version beyond 1.6.0 immediately. Avoid loading untrusted bundles from sources like HuggingFace Hub or GitHub. Implement allow lists for _target_ resolution and disable $ expression evaluation for untrusted bundles.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-100840. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart