Disclosure summary
## Summary Hydra's `instantiate()` API resolves and invokes Python callables named by the `_target_` field in configuration. The target blacklist introduced for CVE-2026-68508 was incomplete. Representative bypasses included execution wrappers such as `timeit.timeit`, executable deserialization through `pickle.loads`, and generic dispatch or wrapper targets that obscured the effective callable. Target aliases, callable-returning helpers, and deferred dispatch could similarly bypass name-based checks. An attacker who can cause an application to instantiate an untrusted Hydra configuration can use these gaps to execute code with the application's privileges. ## Fix Hydra 1.3.6 expands and hardens the blacklist used by the 1.3 compatibility line. It blocks the reported execution and deserialization surfaces, checks canonical callable identities and aliases, mediates callable results, and blocks generic dispatch and wrapper targets that bypass immediate target checks. The Hydra 1.3 blacklist is a best-effort, defense-in-depth measure. It is not a complete security boundary and does not make untrusted configuration safe to instantiate. Hydra 1.4.0.dev9 applies the same hardening and int
Source-specific records & product guidance
Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.
GitHub Reviewed Security Advisories · GHSA-rqx7-p7vv-w7hr
Open original source · Updated Oct 07, 2026
Hydra instantiate target blacklist bypasses permit code execution
Source severity: HIGH / 0
| Ecosystem | Package | Affected range | First patched |
|---|---|---|---|
| pip | hydra-core | >= 1.3.4, < 1.3.6 | 1.3.6 |
| pip | hydra-core | >= 1.4.0.dev0, < 1.4.0.dev9 | 1.4.0.dev9 |
Original records & references
- NIST NVD record
- CVE Program record
- github.com — Reviewed advisory
PUBLISHED 2026-10-07T14:03:49-04:00
MODIFIED 2026-10-07T14:03:50-04:00
INGESTED 2026-10-08T12:30:38-04:00