Read the docs
TI-2026-68893 Aliases CVE-2026-106441GHSA-c3wx-c55w-pxjq

Hydra logging configuration lets attackers invoke importable classes

Priority LOW 35CWE-94Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-94.

Summary

Hydra versions before 1.3.6 and from 1.4.0.dev0 before 1.4.0.dev9 pass Python logging configuration to logging.config.dictConfig() without applying Hydra's target policy. This flaw, classified as CWE-94, lets an attacker who controls the Hydra logging configuration select an importable class or factory that is invoked with the application's privileges, even where instantiate() is protected.

Written with Claude Haiku 5.5 from the sources below · 2026-10-30

Description from the CNA

Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.6 and 1.4.0.dev9, Hydra passes Python logging configuration to logging.config.dictConfig() without applying Hydra's target policy to handler class values or formatter, filter, handler, queue, and listener factories. An attacker who controls Hydra logging configuration can therefore select an importable class or factory and cause it to be invoked with the application's privileges, even in versions where instantiate() is protected because the logging path does not use instantiate(). This issue is fixed in versions 1.3.6 and 1.4.0.dev9.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00165 5th percentileScored 2026-11-07
Fix Fixed hydra (hydra-ecosystem): 1.3.6, 1.4.0.dev9hydra-core (PyPI): 1.3.6, 1.4.0.dev9Red Hat: 4 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
hydra-ecosystemhydrabefore 1.3.6; 1.4.0.dev0 to before 1.4.0.dev91.3.6, 1.4.0.dev9Patch availableCNA
—hydra-core (PyPI)before 1.3.61.3.6Patch availableGHSA-c3wx-c55w-pxjq
—hydra-core (PyPI)1.4.0.dev0 to before 1.4.0.dev91.4.0.dev9Patch availableGHSA-c3wx-c55w-pxjq
  • hydra Vendorhydra-ecosystem Affected before 1.3.6; 1.4.0.dev0 to before 1.4.0.dev9 Fixed in 1.3.6, 1.4.0.dev9 Patch available CNA
  • hydra-core (PyPI) Vendor— Affected before 1.3.6 Fixed in 1.3.6 Patch available GHSA-c3wx-c55w-pxjq
  • hydra-core (PyPI) Vendor— Affected 1.4.0.dev0 to before 1.4.0.dev9 Fixed in 1.4.0.dev9 Patch available GHSA-c3wx-c55w-pxjq

Remediation

Upgrade hydra-core to version 1.3.6 or 1.4.0.dev9, which fix the flaw. Red Hat fixes it in Red Hat AI Inference Server 3.5 through RHSA-2026:82415 (cpu) and RHSA-2026:82368 (cuda), and in Red Hat Enterprise Linux AI 3.5 through RHSA-2026:92452 and RHSA-2026:92449. The sources list no fixed version for hydra.

Written with Claude Haiku 5.5 from the sources below · 2026-10-30

  • Fix · CNA hydra (hydra-ecosystem) Fixed in 1.3.6, 1.4.0.dev9
  • Fix · GHSA-c3wx-c55w-pxjq hydra-core (PyPI) Fixed in 1.3.6 Advisory →
  • Fix · GHSA-c3wx-c55w-pxjq hydra-core (PyPI) Fixed in 1.4.0.dev9 Advisory →

Red Hat 4 advisories

  • RHSA-2026:92452 Released 2026-10-29 · Red Hat rating Critical
    Red Hat Enterprise Linux AI 3.5.2 enhancement update
    • Red Hat Enterprise Linux AI 3.5 registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9, registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9, registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9 +3
  • RHSA-2026:92449 Released 2026-10-29 · Red Hat rating Critical
    Red Hat Enterprise Linux AI 3.5.2 enhancement update
    • Red Hat Enterprise Linux AI 3.5 registry.redhat.io/rhelai3/disk-image-cuda-rhel9
  • RHSA-2026:82415 Released 2026-10-13 · Red Hat rating Critical
    Red Hat AI Inference 3.5.2 (cpu)
    • Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/vllm-cpu-rhel9
Show 1 more Red Hat advisories
  • RHSA-2026:82368 Released 2026-10-13 · Red Hat rating Critical
    Red Hat AI Inference 3.5.2 (cuda)
    • Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/vllm-cuda-rhel9

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat AI Inference Server 3.5Fixed RHSA-2026:82368, RHSA-2026:82415
Red Hat Enterprise Linux AI 3.5Fixed RHSA-2026:92449, RHSA-2026:92452
Not affected: 2 products
  • Red Hat AI Inference Server
  • Red Hat Enterprise Linux AI 3.5

Timeline

  1. 2026-10-06 Threatist record created from CVE-2026-106441
  2. 2026-10-07 Alias added: GHSA-c3wx-c55w-pxjq
  3. 2026-10-07 Fix available: PyPI/[email protected], PyPI/[email protected] · GHSA-c3wx-c55w-pxjq
  4. 2026-10-07 CVSS score added · GHSA-c3wx-c55w-pxjq
  5. 2026-10-07 Weakness changed · GHSA-c3wx-c55w-pxjq
  6. 2026-10-07 7 new references · GHSA-c3wx-c55w-pxjq
  7. 2026-10-07 CISA SSVC decision points changed
  8. 2026-10-07 Priority changed: MEDIUM → LOW
  9. 2026-10-08 Affected versions changed · Red Hat
  10. 2026-10-08 CVSS score added · Red Hat
  11. 2026-10-14 Fix available: RHSA-2026:82368 · Red Hat
  12. 2026-10-14 Fix available: RHSA-2026:82415 · Red Hat
  13. 2026-10-15 Fix available: Red Hat AI Inference Server 3.5 · Red Hat
  14. 2026-10-21 Affected versions changed · Red Hat
  15. 2026-10-30 Fix available: RHSA-2026:92452 · Red Hat
  16. 2026-10-30 Fix available: RHSA-2026:92449 · Red Hat
  17. 2026-10-30 Fix available: Red Hat Enterprise Linux AI 3.5 · Red Hat

References

Advisory 1

Other 6

  • TI-2026-68891 Mutable policy state in Hydra allows blocklist bypass CVSS 4.0HIGH 8.5
  • TI-2026-68892 Hydra Optuna sweeper executes untrusted callables from configuration CVSS 3.1HIGH 7.8
  • TI-2026-68894 Hydra instantiate() blacklist bypass allows code execution CVSS 3.1HIGH 7.8
  • TI-2026-79750 Arbitrary module import in hydra-ray-launcher CVSS 4.0MEDIUM 4.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences