Hydra Ray Launcher
Monthly
Arbitrary module import in the hydra-ray-launcher plugin for Hydra lets an attacker who controls configuration values or command-line overrides force the application process to import any installed Python module via a crafted ${ray_pkg_version:<module>} interpolation, executing that module's import-time side effects. Affected releases are the legacy line from 1.1.0.dev1 up to but excluding 1.2.2, and the Hydra 1.4 line from 1.4.0.dev4 up to but excluding 1.4.0rc2; the resolver is registered during plugin discovery even when a different launcher is selected, so simply switching launchers does not remove the exposure. Impact is bounded: the resolver cannot install attacker code or pass arbitrary function arguments, and meaningful harm depends on a module with a damaging import side effect already being installed and importable, so this is a moderate, locally-triggered integrity issue rather than an urgent one - no public exploit code was identified at time of analysis and there is no confirmed active exploitation (CISA KEV).
Arbitrary module import in the hydra-ray-launcher plugin for Hydra lets an attacker who controls configuration values or command-line overrides force the application process to import any installed Python module via a crafted ${ray_pkg_version:<module>} interpolation, executing that module's import-time side effects. Affected releases are the legacy line from 1.1.0.dev1 up to but excluding 1.2.2, and the Hydra 1.4 line from 1.4.0.dev4 up to but excluding 1.4.0rc2; the resolver is registered during plugin discovery even when a different launcher is selected, so simply switching launchers does not remove the exposure. Impact is bounded: the resolver cannot install attacker code or pass arbitrary function arguments, and meaningful harm depends on a module with a damaging import side effect already being installed and importable, so this is a moderate, locally-triggered integrity issue rather than an urgent one - no public exploit code was identified at time of analysis and there is no confirmed active exploitation (CISA KEV).