Hydra's instantiate() gets a CVE for code execution from untrusted config

GitHub Security Advisories·medium signalXBlueskyLinkedInCopy link

GHSA-2cp2-2r3c-7p7r (CVE-2026-68508, CVSS 7.8, published 21 August 2026) covers hydra.utils.instantiate() resolving and calling whatever _target_ names in a config. Hydra is not a network service, so exploitation needs an application or workflow that loads attacker-controlled config, CLI overrides, or model metadata and passes it through. Versions up to 1.3.3 are affected, fixed in 1.3.4. That model-metadata path is the one worth checking, since agent pipelines routinely instantiate components from configs shipped alongside downloaded checkpoints.