{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-106440", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-10-06T16:49:40.590Z", "datePublished": "2026-10-06T18:51:37.549Z", "dateUpdated": "2026-10-06T18:51:37.549Z"}, "containers": {"cna": {"title": "Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method", "problemTypes": [{"descriptions": [{"cweId": "CWE-470", "lang": "en", "description": "CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-5jjj-9xc3-rm56", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-5jjj-9xc3-rm56"}, {"name": "https://github.com/hydra-ecosystem/hydra/commit/0dd18084589a3d3e577d1f1a8a48fb485c94a5e6", "tags": ["x_refsource_MISC"], "url": "https://github.com/hydra-ecosystem/hydra/commit/0dd18084589a3d3e577d1f1a8a48fb485c94a5e6"}, {"name": "https://github.com/hydra-ecosystem/hydra/commit/4720dfca2bde27fa140ec287a05709668fbdf168", "tags": ["x_refsource_MISC"], "url": "https://github.com/hydra-ecosystem/hydra/commit/4720dfca2bde27fa140ec287a05709668fbdf168"}, {"name": "https://github.com/hydra-ecosystem/hydra/releases/tag/v1.3.7", "tags": ["x_refsource_MISC"], "url": "https://github.com/hydra-ecosystem/hydra/releases/tag/v1.3.7"}], "affected": [{"vendor": "hydra-ecosystem", "product": "hydra", "versions": [{"version": ">= 1.2.0, < 1.3.0", "status": "affected"}, {"version": ">= 1.4.0.dev4, < 1.4.0.dev10", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-10-06T18:51:37.549Z"}, "descriptions": [{"lang": "en", "value": "Hydra is a framework for elegantly configuring complex applications. From 1.2.0 until 1.3.0 and 1.4.0.dev10, the hydra-optuna-sweeper package accepts a configuration-controlled dotted path in hydra.sweeper.custom_search_space, resolves it with hydra.utils.get_method(), and later invokes the returned callable in the Hydra controller process. Because get_method() is a trusted-input lookup helper and does not apply the execution policy used by instantiate(), an attacker who controls Optuna sweep configuration or command-line overrides can select importable Python code for execution with the application's privileges, including bypassing a trusted execution whitelist on affected Hydra 1.4 development releases. This issue is fixed in versions 1.3.0 and 1.4.0.dev10."}], "source": {"advisory": "GHSA-5jjj-9xc3-rm56", "discovery": "UNKNOWN"}}}}

{}

{"affected": [{"affectedData": [{"product": "hydra", "vendor": "hydra-ecosystem", "versions": [{"status": "affected", "version": ">= 1.2.0, < 1.3.0"}, {"status": "affected", "version": ">= 1.4.0.dev4, < 1.4.0.dev10"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Hydra is a framework for elegantly configuring complex applications. From 1.2.0 until 1.3.0 and 1.4.0.dev10, the hydra-optuna-sweeper package accepts a configuration-controlled dotted path in hydra.sweeper.custom_search_space, resolves it with hydra.utils.get_method(), and later invokes the returned callable in the Hydra controller process. Because get_method() is a trusted-input lookup helper and does not apply the execution policy used by instantiate(), an attacker who controls Optuna sweep configuration or command-line overrides can select importable Python code for execution with the application's privileges, including bypassing a trusted execution whitelist on affected Hydra 1.4 development releases. This issue is fixed in versions 1.3.0 and 1.4.0.dev10."}], "id": "CVE-2026-106440", "lastModified": "2026-10-06T20:03:40.690", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "security-advisories@github.com", "type": "Secondary"}]}, "published": "2026-10-06T19:18:12.877", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/hydra-ecosystem/hydra/commit/0dd18084589a3d3e577d1f1a8a48fb485c94a5e6"}, {"source": "security-advisories@github.com", "url": "https://github.com/hydra-ecosystem/hydra/commit/4720dfca2bde27fa140ec287a05709668fbdf168"}, {"source": "security-advisories@github.com", "url": "https://github.com/hydra-ecosystem/hydra/releases/tag/v1.3.7"}, {"source": "security-advisories@github.com", "url": "https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-5jjj-9xc3-rm56"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-470"}], "source": "security-advisories@github.com", "type": "Primary"}]}

{}

{}