Read the docs
TI-2026-79750 Aliases CVE-2026-115749GHSA-7vmw-xf27-46r9

Arbitrary module import in hydra-ray-launcher

Priority LOW 21CWE-470Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
None · Low · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

hydra-ray-launcher from 1.1.0.dev1 before 1.2.2 and from 1.4.0.dev4 before 1.4.0rc2 contains an arbitrary module import flaw (CWE-470) in its ray_pkg_version OmegaConf resolver, which passes input to importlib.import_module(). A local attacker with low privileges who controls configuration values or command-line overrides can make the application import any installed module, which runs that module's import-time side effects in the application process.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Description from the CNA

hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.dev4 before 1.4.0rc2 contains an arbitrary module import vulnerability via the ray_pkg_version OmegaConf resolver passing input to importlib.import_module(). Attackers controlling configuration values or command-line overrides can supply a ray_pkg_version interpolation to import any installed module, triggering its import-time side effects in the application process.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0022 12th percentileScored 2026-11-07
Fix Fixed hydra-ray-launcher (hydra-ecosystem): 1.2.2, 1.4.0rc2

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
hydra-ecosystemhydra-ray-launcher1.1.0.dev1 to before 1.2.2; 1.4.0.dev4 to before 1.4.0rc21.2.2, 1.4.0rc2Patch availableCNA
  • hydra-ray-launcher Vendorhydra-ecosystem Affected 1.1.0.dev1 to before 1.2.2; 1.4.0.dev4 to before 1.4.0rc2 Fixed in 1.2.2, 1.4.0rc2 Patch available CNA

Remediation

The fixed versions are hydra-ray-launcher 1.2.2 and 1.4.0rc2. Upgrade to one of these versions.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

  • Fix · CNA hydra-ray-launcher (hydra-ecosystem) Fixed in 1.2.2, 1.4.0rc2

Timeline

  1. 2026-10-23 Threatist record created from CVE-2026-115749
  2. 2026-10-23 CISA SSVC decision points changed
  3. 2026-10-23 Alias added: GHSA-7vmw-xf27-46r9

References

Patch 2

Advisory 1

Other 1

  • TI-2026-68891 Mutable policy state in Hydra allows blocklist bypass CVSS 4.0HIGH 8.5
  • TI-2026-68892 Hydra Optuna sweeper executes untrusted callables from configuration CVSS 3.1HIGH 7.8
  • TI-2026-68894 Hydra instantiate() blacklist bypass allows code execution CVSS 3.1HIGH 7.8
  • TI-2026-68893 Hydra logging configuration lets attackers invoke importable classes CVSS 3.1HIGH 7.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences