{"data":{"id":"660a70b6-270b-43aa-9c26-912e39b9a038","title":"GHSA-2cp2-2r3c-7p7r: Hydra: hydra.utils.instantiate with untrusted config can lead to code execution","summary":"Hydra's `instantiate()` function (which constructs objects and calls functions based on configuration files) can execute arbitrary code if an attacker controls the `_target_` field in untrusted config. This means if your application loads config from an untrusted source and passes it to `instantiate()`, an attacker can trick it into running malicious code.","solution":"Upgrade to Hydra 1.3.4 or newer, which adds a blacklist of dangerous targets. For applications handling untrusted config, validate `_target_` values against a trusted allowlist (a list of approved values) before calling `instantiate()`. The unreleased Hydra 1.4 uses an allowlist-based model that fully addresses this vulnerability.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-2cp2-2r3c-7p7r","publishedAt":"2026-08-21T20:57:31.000Z","cveId":"CVE-2026-68508","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":[],"issueType":"vulnerability","affectedPackages":["hydra-core@<= 1.3.3 (fixed: 1.3.4)"],"affectedVendors":["HuggingFace"],"affectedVendorsRaw":["Hydra","NVIDIA NeMo"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0,"patchAvailable":true,"disclosureDate":"2026-08-21T20:57:31.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}