Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
8 vulnerabilities by hydra-ecosystem
CVE-2026-106442 (GCVE-0-2026-106442)
Vulnerability from nvd – Published: 2026-10-06 18:55 – Updated: 2026-10-07 14:14
VLAI
EPSS
VEX
Title
Hydra instantiate target blacklist bypasses permit code execution
Summary
Hydra is a framework for elegantly configuring complex applications. From 1.3.4 until 1.3.6 and 1.4.0.dev9, the instantiate() target blacklist introduced for CVE-2026-68508 incompletely checks the effective callable selected by the target field. Execution wrappers such as timeit.timeit, executable deserialization through pickle.loads, aliases, callable-returning helpers, generic dispatch, and deferred calls can obscure or defer the effective target and bypass name-based authorization. An attacker who causes an application to instantiate untrusted Hydra configuration can use these gaps to execute code with the application's privileges. This issue is fixed in versions 1.3.6 and 1.4.0.dev9.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-07 14:12 UTC
CWE
- CWE-184 - Incomplete List of Disallowed Inputs
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://github.com/hydra-ecosystem/hydra/security… | x_refsource_CONFIRM |
| https://github.com/hydra-ecosystem/hydra/pull/3412 | x_refsource_MISC |
| https://github.com/hydra-ecosystem/hydra/pull/3413 | x_refsource_MISC |
| https://github.com/hydra-ecosystem/hydra/commit/2… | x_refsource_MISC |
| https://github.com/hydra-ecosystem/hydra/commit/f… | x_refsource_MISC |
| https://github.com/hydra-ecosystem/hydra/releases… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| hydra-ecosystem | hydra |
Affected:
>= 1.3.4, < 1.3.6
Affected: >= 1.4.0.dev0, < 1.4.0.dev9 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-106442",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-07T14:12:56.490404Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-07T14:14:08.296Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "hydra",
"vendor": "hydra-ecosystem",
"versions": [
{
"status": "affected",
"version": "\u003e= 1.3.4, \u003c 1.3.6"
},
{
"status": "affected",
"version": "\u003e= 1.4.0.dev0, \u003c 1.4.0.dev9"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Hydra is a framework for elegantly configuring complex applications. From 1.3.4 until 1.3.6 and 1.4.0.dev9, the instantiate() target blacklist introduced for CVE-2026-68508 incompletely checks the effective callable selected by the target field. Execution wrappers such as timeit.timeit, executable deserialization through pickle.loads, aliases, callable-returning helpers, generic dispatch, and deferred calls can obscure or defer the effective target and bypass name-based authorization. An attacker who causes an application to instantiate untrusted Hydra configuration can use these gaps to execute code with the application\u0027s privileges. This issue is fixed in versions 1.3.6 and 1.4.0.dev9."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-184",
"description": "CWE-184: Incomplete List of Disallowed Inputs",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-06T18:55:49.150Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-rqx7-p7vv-w7hr",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-rqx7-p7vv-w7hr"
},
{
"name": "https://github.com/hydra-ecosystem/hydra/pull/3412",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/hydra-ecosystem/hydra/pull/3412"
},
{
"name": "https://github.com/hydra-ecosystem/hydra/pull/3413",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/hydra-ecosystem/hydra/pull/3413"
},
{
"name": "https://github.com/hydra-ecosystem/hydra/commit/2c82bbb3f39603b336cb852461739fdf7a38798a",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/hydra-ecosystem/hydra/commit/2c82bbb3f39603b336cb852461739fdf7a38798a"
},
{
"name": "https://github.com/hydra-ecosystem/hydra/commit/f462811117b5ecfd2ed652ed52d6b4e3771bd943",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/hydra-ecosystem/hydra/commit/f462811117b5ecfd2ed652ed52d6b4e3771bd943"
},
{
"name": "https://github.com/hydra-ecosystem/hydra/releases/tag/v1.3.6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/hydra-ecosystem/hydra/releases/tag/v1.3.6"
}
],
"source": {
"advisory": "GHSA-rqx7-p7vv-w7hr",
"discovery": "UNKNOWN"
},
"title": "Hydra instantiate target blacklist bypasses permit code execution"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-106442",
"datePublished": "2026-10-06T18:55:49.150Z",
"dateReserved": "2026-10-06T16:49:40.590Z",
"dateUpdated": "2026-10-07T14:14:08.296Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-106441 (GCVE-0-2026-106441)
Vulnerability from nvd – Published: 2026-10-06 18:53 – Updated: 2026-10-07 18:49
VLAI
EPSS
VEX
Title
Hydra logging configuration permits unsafe callable resolution
Summary
Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.6 and 1.4.0.dev9, Hydra passes Python logging configuration to logging.config.dictConfig() without applying Hydra's target policy to handler class values or formatter, filter, handler, queue, and listener factories. An attacker who controls Hydra logging configuration can therefore select an importable class or factory and cause it to be invoked with the application's privileges, even in versions where instantiate() is protected because the logging path does not use instantiate(). This issue is fixed in versions 1.3.6 and 1.4.0.dev9.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-07 18:49 UTC
CWE
- CWE-94 - Improper Control of Generation of Code ('Code Injection')
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/hydra-ecosystem/hydra/security… | x_refsource_CONFIRM |
| https://github.com/hydra-ecosystem/hydra/pull/3420 | x_refsource_MISC |
| https://github.com/hydra-ecosystem/hydra/commit/7… | x_refsource_MISC |
| https://github.com/hydra-ecosystem/hydra/commit/f… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| hydra-ecosystem | hydra |
Affected:
< 1.3.6
Affected: >= 1.4.0.dev0, < 1.4.0.dev9 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-106441",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-07T18:49:11.628391Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-07T18:49:30.024Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "hydra",
"vendor": "hydra-ecosystem",
"versions": [
{
"status": "affected",
"version": "\u003c 1.3.6"
},
{
"status": "affected",
"version": "\u003e= 1.4.0.dev0, \u003c 1.4.0.dev9"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.6 and 1.4.0.dev9, Hydra passes Python logging configuration to logging.config.dictConfig() without applying Hydra\u0027s target policy to handler class values or formatter, filter, handler, queue, and listener factories. An attacker who controls Hydra logging configuration can therefore select an importable class or factory and cause it to be invoked with the application\u0027s privileges, even in versions where instantiate() is protected because the logging path does not use instantiate(). This issue is fixed in versions 1.3.6 and 1.4.0.dev9."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-06T18:53:50.078Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-c3wx-c55w-pxjq",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-c3wx-c55w-pxjq"
},
{
"name": "https://github.com/hydra-ecosystem/hydra/pull/3420",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/hydra-ecosystem/hydra/pull/3420"
},
{
"name": "https://github.com/hydra-ecosystem/hydra/commit/76bfc30ce1f3105416941dd2e3a562568e369120",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/hydra-ecosystem/hydra/commit/76bfc30ce1f3105416941dd2e3a562568e369120"
},
{
"name": "https://github.com/hydra-ecosystem/hydra/commit/ff3e4dba890c29a21d8c2bb867ee87d37ccf21d0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/hydra-ecosystem/hydra/commit/ff3e4dba890c29a21d8c2bb867ee87d37ccf21d0"
}
],
"source": {
"advisory": "GHSA-c3wx-c55w-pxjq",
"discovery": "UNKNOWN"
},
"title": "Hydra logging configuration permits unsafe callable resolution"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-106441",
"datePublished": "2026-10-06T18:53:27.761Z",
"dateReserved": "2026-10-06T16:49:40.590Z",
"dateUpdated": "2026-10-07T18:49:30.024Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-106440 (GCVE-0-2026-106440)
Vulnerability from nvd – Published: 2026-10-06 18:51 – Updated: 2026-10-06 18:51
VLAI
EPSS
VEX
Title
Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method
Summary
Hydra is a framework for elegantly configuring complex applications. From 1.2.0 until 1.3.0 and 1.4.0.dev10, the hydra-optuna-sweeper package accepts a configuration-controlled dotted path in hydra.sweeper.custom_search_space, resolves it with hydra.utils.get_method(), and later invokes the returned callable in the Hydra controller process. Because get_method() is a trusted-input lookup helper and does not apply the execution policy used by instantiate(), an attacker who controls Optuna sweep configuration or command-line overrides can select importable Python code for execution with the application's privileges, including bypassing a trusted execution whitelist on affected Hydra 1.4 development releases. This issue is fixed in versions 1.3.0 and 1.4.0.dev10.
Severity
7.8 (High)
CWE
- CWE-470 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/hydra-ecosystem/hydra/security… | x_refsource_CONFIRM |
| https://github.com/hydra-ecosystem/hydra/commit/0… | x_refsource_MISC |
| https://github.com/hydra-ecosystem/hydra/commit/4… | x_refsource_MISC |
| https://github.com/hydra-ecosystem/hydra/releases… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| hydra-ecosystem | hydra |
Affected:
>= 1.2.0, < 1.3.0
Affected: >= 1.4.0.dev4, < 1.4.0.dev10 |
{
"containers": {
"cna": {
"affected": [
{
"product": "hydra",
"vendor": "hydra-ecosystem",
"versions": [
{
"status": "affected",
"version": "\u003e= 1.2.0, \u003c 1.3.0"
},
{
"status": "affected",
"version": "\u003e= 1.4.0.dev4, \u003c 1.4.0.dev10"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Hydra is a framework for elegantly configuring complex applications. From 1.2.0 until 1.3.0 and 1.4.0.dev10, the hydra-optuna-sweeper package accepts a configuration-controlled dotted path in hydra.sweeper.custom_search_space, resolves it with hydra.utils.get_method(), and later invokes the returned callable in the Hydra controller process. Because get_method() is a trusted-input lookup helper and does not apply the execution policy used by instantiate(), an attacker who controls Optuna sweep configuration or command-line overrides can select importable Python code for execution with the application\u0027s privileges, including bypassing a trusted execution whitelist on affected Hydra 1.4 development releases. This issue is fixed in versions 1.3.0 and 1.4.0.dev10."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-470",
"description": "CWE-470: Use of Externally-Controlled Input to Select Classes or Code (\u0027Unsafe Reflection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-06T18:51:37.549Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-5jjj-9xc3-rm56",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-5jjj-9xc3-rm56"
},
{
"name": "https://github.com/hydra-ecosystem/hydra/commit/0dd18084589a3d3e577d1f1a8a48fb485c94a5e6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/hydra-ecosystem/hydra/commit/0dd18084589a3d3e577d1f1a8a48fb485c94a5e6"
},
{
"name": "https://github.com/hydra-ecosystem/hydra/commit/4720dfca2bde27fa140ec287a05709668fbdf168",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/hydra-ecosystem/hydra/commit/4720dfca2bde27fa140ec287a05709668fbdf168"
},
{
"name": "https://github.com/hydra-ecosystem/hydra/releases/tag/v1.3.7",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/hydra-ecosystem/hydra/releases/tag/v1.3.7"
}
],
"source": {
"advisory": "GHSA-5jjj-9xc3-rm56",
"discovery": "UNKNOWN"
},
"title": "Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-106440",
"datePublished": "2026-10-06T18:51:37.549Z",
"dateReserved": "2026-10-06T16:49:40.590Z",
"dateUpdated": "2026-10-06T18:51:37.549Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-106439 (GCVE-0-2026-106439)
Vulnerability from nvd – Published: 2026-10-06 18:49 – Updated: 2026-10-06 19:48
VLAI
EPSS
VEX
Title
Hydra: Mutable instantiate policy sets allow target blocklist bypass
Summary
Hydra is a framework for elegantly configuring complex applications. From 1.3.4 until 1.3.7 and 1.4.0.dev10, Hydra stores legacy instantiate target blocklists and related execution-policy collections in mutable module-level state. An attacker who controls multiple sibling target entries can resolve hydra._internal.target_policy.UNCONTROLLED_EXECUTION_TARGETS.discard through instantiate(), remove a denied target, and then invoke that target because sibling nodes are processed in insertion order against the same modified policy. The mutation persists in process-global state and can enable code execution with the application's privileges, while a narrow execution whitelist supplied by trusted Python code is not bypassed by the reported direct mutation path. This issue is fixed in versions 1.3.7 and 1.4.0.dev10.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-06 19:48 UTC
CWE
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/hydra-ecosystem/hydra/security… | x_refsource_CONFIRM |
| https://github.com/hydra-ecosystem/hydra/commit/0… | x_refsource_MISC |
| https://github.com/hydra-ecosystem/hydra/commit/4… | x_refsource_MISC |
| https://github.com/hydra-ecosystem/hydra/releases… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| hydra-ecosystem | hydra |
Affected:
>= 1.3.4, < 1.3.7
Affected: >= 1.4.0.dev4, < 1.4.0.dev10 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-106439",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-06T19:48:26.207340Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-06T19:48:45.736Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-mwj6-rfh8-7qf4"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "hydra",
"vendor": "hydra-ecosystem",
"versions": [
{
"status": "affected",
"version": "\u003e= 1.3.4, \u003c 1.3.7"
},
{
"status": "affected",
"version": "\u003e= 1.4.0.dev4, \u003c 1.4.0.dev10"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Hydra is a framework for elegantly configuring complex applications. From 1.3.4 until 1.3.7 and 1.4.0.dev10, Hydra stores legacy instantiate target blocklists and related execution-policy collections in mutable module-level state. An attacker who controls multiple sibling target entries can resolve hydra._internal.target_policy.UNCONTROLLED_EXECUTION_TARGETS.discard through instantiate(), remove a denied target, and then invoke that target because sibling nodes are processed in insertion order against the same modified policy. The mutation persists in process-global state and can enable code execution with the application\u0027s privileges, while a narrow execution whitelist supplied by trusted Python code is not bypassed by the reported direct mutation path. This issue is fixed in versions 1.3.7 and 1.4.0.dev10."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"privilegesRequired": "NONE",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "PASSIVE",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-470",
"description": "CWE-470: Use of Externally-Controlled Input to Select Classes or Code (\u0027Unsafe Reflection\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-693",
"description": "CWE-693: Protection Mechanism Failure",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-06T18:49:12.110Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-mwj6-rfh8-7qf4",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-mwj6-rfh8-7qf4"
},
{
"name": "https://github.com/hydra-ecosystem/hydra/commit/0dd18084589a3d3e577d1f1a8a48fb485c94a5e6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/hydra-ecosystem/hydra/commit/0dd18084589a3d3e577d1f1a8a48fb485c94a5e6"
},
{
"name": "https://github.com/hydra-ecosystem/hydra/commit/4720dfca2bde27fa140ec287a05709668fbdf168",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/hydra-ecosystem/hydra/commit/4720dfca2bde27fa140ec287a05709668fbdf168"
},
{
"name": "https://github.com/hydra-ecosystem/hydra/releases/tag/v1.3.7",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/hydra-ecosystem/hydra/releases/tag/v1.3.7"
}
],
"source": {
"advisory": "GHSA-mwj6-rfh8-7qf4",
"discovery": "UNKNOWN"
},
"title": "Hydra: Mutable instantiate policy sets allow target blocklist bypass"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-106439",
"datePublished": "2026-10-06T18:49:12.110Z",
"dateReserved": "2026-10-06T16:49:40.590Z",
"dateUpdated": "2026-10-06T19:48:45.736Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-106442 (GCVE-0-2026-106442)
Vulnerability from cvelistv5 – Published: 2026-10-06 18:55 – Updated: 2026-10-07 14:14
VLAI
EPSS
VEX
Title
Hydra instantiate target blacklist bypasses permit code execution
Summary
Hydra is a framework for elegantly configuring complex applications. From 1.3.4 until 1.3.6 and 1.4.0.dev9, the instantiate() target blacklist introduced for CVE-2026-68508 incompletely checks the effective callable selected by the target field. Execution wrappers such as timeit.timeit, executable deserialization through pickle.loads, aliases, callable-returning helpers, generic dispatch, and deferred calls can obscure or defer the effective target and bypass name-based authorization. An attacker who causes an application to instantiate untrusted Hydra configuration can use these gaps to execute code with the application's privileges. This issue is fixed in versions 1.3.6 and 1.4.0.dev9.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-07 14:12 UTC
CWE
- CWE-184 - Incomplete List of Disallowed Inputs
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://github.com/hydra-ecosystem/hydra/security… | x_refsource_CONFIRM |
| https://github.com/hydra-ecosystem/hydra/pull/3412 | x_refsource_MISC |
| https://github.com/hydra-ecosystem/hydra/pull/3413 | x_refsource_MISC |
| https://github.com/hydra-ecosystem/hydra/commit/2… | x_refsource_MISC |
| https://github.com/hydra-ecosystem/hydra/commit/f… | x_refsource_MISC |
| https://github.com/hydra-ecosystem/hydra/releases… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| hydra-ecosystem | hydra |
Affected:
>= 1.3.4, < 1.3.6
Affected: >= 1.4.0.dev0, < 1.4.0.dev9 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-106442",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-07T14:12:56.490404Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-07T14:14:08.296Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "hydra",
"vendor": "hydra-ecosystem",
"versions": [
{
"status": "affected",
"version": "\u003e= 1.3.4, \u003c 1.3.6"
},
{
"status": "affected",
"version": "\u003e= 1.4.0.dev0, \u003c 1.4.0.dev9"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Hydra is a framework for elegantly configuring complex applications. From 1.3.4 until 1.3.6 and 1.4.0.dev9, the instantiate() target blacklist introduced for CVE-2026-68508 incompletely checks the effective callable selected by the target field. Execution wrappers such as timeit.timeit, executable deserialization through pickle.loads, aliases, callable-returning helpers, generic dispatch, and deferred calls can obscure or defer the effective target and bypass name-based authorization. An attacker who causes an application to instantiate untrusted Hydra configuration can use these gaps to execute code with the application\u0027s privileges. This issue is fixed in versions 1.3.6 and 1.4.0.dev9."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-184",
"description": "CWE-184: Incomplete List of Disallowed Inputs",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-06T18:55:49.150Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-rqx7-p7vv-w7hr",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-rqx7-p7vv-w7hr"
},
{
"name": "https://github.com/hydra-ecosystem/hydra/pull/3412",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/hydra-ecosystem/hydra/pull/3412"
},
{
"name": "https://github.com/hydra-ecosystem/hydra/pull/3413",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/hydra-ecosystem/hydra/pull/3413"
},
{
"name": "https://github.com/hydra-ecosystem/hydra/commit/2c82bbb3f39603b336cb852461739fdf7a38798a",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/hydra-ecosystem/hydra/commit/2c82bbb3f39603b336cb852461739fdf7a38798a"
},
{
"name": "https://github.com/hydra-ecosystem/hydra/commit/f462811117b5ecfd2ed652ed52d6b4e3771bd943",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/hydra-ecosystem/hydra/commit/f462811117b5ecfd2ed652ed52d6b4e3771bd943"
},
{
"name": "https://github.com/hydra-ecosystem/hydra/releases/tag/v1.3.6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/hydra-ecosystem/hydra/releases/tag/v1.3.6"
}
],
"source": {
"advisory": "GHSA-rqx7-p7vv-w7hr",
"discovery": "UNKNOWN"
},
"title": "Hydra instantiate target blacklist bypasses permit code execution"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-106442",
"datePublished": "2026-10-06T18:55:49.150Z",
"dateReserved": "2026-10-06T16:49:40.590Z",
"dateUpdated": "2026-10-07T14:14:08.296Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-106441 (GCVE-0-2026-106441)
Vulnerability from cvelistv5 – Published: 2026-10-06 18:53 – Updated: 2026-10-07 18:49
VLAI
EPSS
VEX
Title
Hydra logging configuration permits unsafe callable resolution
Summary
Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.6 and 1.4.0.dev9, Hydra passes Python logging configuration to logging.config.dictConfig() without applying Hydra's target policy to handler class values or formatter, filter, handler, queue, and listener factories. An attacker who controls Hydra logging configuration can therefore select an importable class or factory and cause it to be invoked with the application's privileges, even in versions where instantiate() is protected because the logging path does not use instantiate(). This issue is fixed in versions 1.3.6 and 1.4.0.dev9.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-07 18:49 UTC
CWE
- CWE-94 - Improper Control of Generation of Code ('Code Injection')
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/hydra-ecosystem/hydra/security… | x_refsource_CONFIRM |
| https://github.com/hydra-ecosystem/hydra/pull/3420 | x_refsource_MISC |
| https://github.com/hydra-ecosystem/hydra/commit/7… | x_refsource_MISC |
| https://github.com/hydra-ecosystem/hydra/commit/f… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| hydra-ecosystem | hydra |
Affected:
< 1.3.6
Affected: >= 1.4.0.dev0, < 1.4.0.dev9 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-106441",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-07T18:49:11.628391Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-07T18:49:30.024Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "hydra",
"vendor": "hydra-ecosystem",
"versions": [
{
"status": "affected",
"version": "\u003c 1.3.6"
},
{
"status": "affected",
"version": "\u003e= 1.4.0.dev0, \u003c 1.4.0.dev9"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.6 and 1.4.0.dev9, Hydra passes Python logging configuration to logging.config.dictConfig() without applying Hydra\u0027s target policy to handler class values or formatter, filter, handler, queue, and listener factories. An attacker who controls Hydra logging configuration can therefore select an importable class or factory and cause it to be invoked with the application\u0027s privileges, even in versions where instantiate() is protected because the logging path does not use instantiate(). This issue is fixed in versions 1.3.6 and 1.4.0.dev9."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-06T18:53:50.078Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-c3wx-c55w-pxjq",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-c3wx-c55w-pxjq"
},
{
"name": "https://github.com/hydra-ecosystem/hydra/pull/3420",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/hydra-ecosystem/hydra/pull/3420"
},
{
"name": "https://github.com/hydra-ecosystem/hydra/commit/76bfc30ce1f3105416941dd2e3a562568e369120",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/hydra-ecosystem/hydra/commit/76bfc30ce1f3105416941dd2e3a562568e369120"
},
{
"name": "https://github.com/hydra-ecosystem/hydra/commit/ff3e4dba890c29a21d8c2bb867ee87d37ccf21d0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/hydra-ecosystem/hydra/commit/ff3e4dba890c29a21d8c2bb867ee87d37ccf21d0"
}
],
"source": {
"advisory": "GHSA-c3wx-c55w-pxjq",
"discovery": "UNKNOWN"
},
"title": "Hydra logging configuration permits unsafe callable resolution"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-106441",
"datePublished": "2026-10-06T18:53:27.761Z",
"dateReserved": "2026-10-06T16:49:40.590Z",
"dateUpdated": "2026-10-07T18:49:30.024Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-106440 (GCVE-0-2026-106440)
Vulnerability from cvelistv5 – Published: 2026-10-06 18:51 – Updated: 2026-10-06 18:51
VLAI
EPSS
VEX
Title
Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method
Summary
Hydra is a framework for elegantly configuring complex applications. From 1.2.0 until 1.3.0 and 1.4.0.dev10, the hydra-optuna-sweeper package accepts a configuration-controlled dotted path in hydra.sweeper.custom_search_space, resolves it with hydra.utils.get_method(), and later invokes the returned callable in the Hydra controller process. Because get_method() is a trusted-input lookup helper and does not apply the execution policy used by instantiate(), an attacker who controls Optuna sweep configuration or command-line overrides can select importable Python code for execution with the application's privileges, including bypassing a trusted execution whitelist on affected Hydra 1.4 development releases. This issue is fixed in versions 1.3.0 and 1.4.0.dev10.
Severity
7.8 (High)
CWE
- CWE-470 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/hydra-ecosystem/hydra/security… | x_refsource_CONFIRM |
| https://github.com/hydra-ecosystem/hydra/commit/0… | x_refsource_MISC |
| https://github.com/hydra-ecosystem/hydra/commit/4… | x_refsource_MISC |
| https://github.com/hydra-ecosystem/hydra/releases… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| hydra-ecosystem | hydra |
Affected:
>= 1.2.0, < 1.3.0
Affected: >= 1.4.0.dev4, < 1.4.0.dev10 |
{
"containers": {
"cna": {
"affected": [
{
"product": "hydra",
"vendor": "hydra-ecosystem",
"versions": [
{
"status": "affected",
"version": "\u003e= 1.2.0, \u003c 1.3.0"
},
{
"status": "affected",
"version": "\u003e= 1.4.0.dev4, \u003c 1.4.0.dev10"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Hydra is a framework for elegantly configuring complex applications. From 1.2.0 until 1.3.0 and 1.4.0.dev10, the hydra-optuna-sweeper package accepts a configuration-controlled dotted path in hydra.sweeper.custom_search_space, resolves it with hydra.utils.get_method(), and later invokes the returned callable in the Hydra controller process. Because get_method() is a trusted-input lookup helper and does not apply the execution policy used by instantiate(), an attacker who controls Optuna sweep configuration or command-line overrides can select importable Python code for execution with the application\u0027s privileges, including bypassing a trusted execution whitelist on affected Hydra 1.4 development releases. This issue is fixed in versions 1.3.0 and 1.4.0.dev10."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-470",
"description": "CWE-470: Use of Externally-Controlled Input to Select Classes or Code (\u0027Unsafe Reflection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-06T18:51:37.549Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-5jjj-9xc3-rm56",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-5jjj-9xc3-rm56"
},
{
"name": "https://github.com/hydra-ecosystem/hydra/commit/0dd18084589a3d3e577d1f1a8a48fb485c94a5e6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/hydra-ecosystem/hydra/commit/0dd18084589a3d3e577d1f1a8a48fb485c94a5e6"
},
{
"name": "https://github.com/hydra-ecosystem/hydra/commit/4720dfca2bde27fa140ec287a05709668fbdf168",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/hydra-ecosystem/hydra/commit/4720dfca2bde27fa140ec287a05709668fbdf168"
},
{
"name": "https://github.com/hydra-ecosystem/hydra/releases/tag/v1.3.7",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/hydra-ecosystem/hydra/releases/tag/v1.3.7"
}
],
"source": {
"advisory": "GHSA-5jjj-9xc3-rm56",
"discovery": "UNKNOWN"
},
"title": "Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-106440",
"datePublished": "2026-10-06T18:51:37.549Z",
"dateReserved": "2026-10-06T16:49:40.590Z",
"dateUpdated": "2026-10-06T18:51:37.549Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-106439 (GCVE-0-2026-106439)
Vulnerability from cvelistv5 – Published: 2026-10-06 18:49 – Updated: 2026-10-06 19:48
VLAI
EPSS
VEX
Title
Hydra: Mutable instantiate policy sets allow target blocklist bypass
Summary
Hydra is a framework for elegantly configuring complex applications. From 1.3.4 until 1.3.7 and 1.4.0.dev10, Hydra stores legacy instantiate target blocklists and related execution-policy collections in mutable module-level state. An attacker who controls multiple sibling target entries can resolve hydra._internal.target_policy.UNCONTROLLED_EXECUTION_TARGETS.discard through instantiate(), remove a denied target, and then invoke that target because sibling nodes are processed in insertion order against the same modified policy. The mutation persists in process-global state and can enable code execution with the application's privileges, while a narrow execution whitelist supplied by trusted Python code is not bypassed by the reported direct mutation path. This issue is fixed in versions 1.3.7 and 1.4.0.dev10.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-06 19:48 UTC
CWE
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/hydra-ecosystem/hydra/security… | x_refsource_CONFIRM |
| https://github.com/hydra-ecosystem/hydra/commit/0… | x_refsource_MISC |
| https://github.com/hydra-ecosystem/hydra/commit/4… | x_refsource_MISC |
| https://github.com/hydra-ecosystem/hydra/releases… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| hydra-ecosystem | hydra |
Affected:
>= 1.3.4, < 1.3.7
Affected: >= 1.4.0.dev4, < 1.4.0.dev10 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-106439",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-06T19:48:26.207340Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-06T19:48:45.736Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-mwj6-rfh8-7qf4"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "hydra",
"vendor": "hydra-ecosystem",
"versions": [
{
"status": "affected",
"version": "\u003e= 1.3.4, \u003c 1.3.7"
},
{
"status": "affected",
"version": "\u003e= 1.4.0.dev4, \u003c 1.4.0.dev10"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Hydra is a framework for elegantly configuring complex applications. From 1.3.4 until 1.3.7 and 1.4.0.dev10, Hydra stores legacy instantiate target blocklists and related execution-policy collections in mutable module-level state. An attacker who controls multiple sibling target entries can resolve hydra._internal.target_policy.UNCONTROLLED_EXECUTION_TARGETS.discard through instantiate(), remove a denied target, and then invoke that target because sibling nodes are processed in insertion order against the same modified policy. The mutation persists in process-global state and can enable code execution with the application\u0027s privileges, while a narrow execution whitelist supplied by trusted Python code is not bypassed by the reported direct mutation path. This issue is fixed in versions 1.3.7 and 1.4.0.dev10."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"privilegesRequired": "NONE",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "PASSIVE",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-470",
"description": "CWE-470: Use of Externally-Controlled Input to Select Classes or Code (\u0027Unsafe Reflection\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-693",
"description": "CWE-693: Protection Mechanism Failure",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-06T18:49:12.110Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-mwj6-rfh8-7qf4",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-mwj6-rfh8-7qf4"
},
{
"name": "https://github.com/hydra-ecosystem/hydra/commit/0dd18084589a3d3e577d1f1a8a48fb485c94a5e6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/hydra-ecosystem/hydra/commit/0dd18084589a3d3e577d1f1a8a48fb485c94a5e6"
},
{
"name": "https://github.com/hydra-ecosystem/hydra/commit/4720dfca2bde27fa140ec287a05709668fbdf168",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/hydra-ecosystem/hydra/commit/4720dfca2bde27fa140ec287a05709668fbdf168"
},
{
"name": "https://github.com/hydra-ecosystem/hydra/releases/tag/v1.3.7",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/hydra-ecosystem/hydra/releases/tag/v1.3.7"
}
],
"source": {
"advisory": "GHSA-mwj6-rfh8-7qf4",
"discovery": "UNKNOWN"
},
"title": "Hydra: Mutable instantiate policy sets allow target blocklist bypass"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-106439",
"datePublished": "2026-10-06T18:49:12.110Z",
"dateReserved": "2026-10-06T16:49:40.590Z",
"dateUpdated": "2026-10-06T19:48:45.736Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}