Hydra-core _instantiate() Target Blocklist Bypass Vulnerability (RCE) Analysis

Vulnerability Overview Title: Mutable instantiate policy sets allow target blocklist bypass Description: Hydra’s target blocklist and associated execution policy sets are stored in mutable module-level state. Since can resolve attributes on imported objects, configurations can resolve to mutating methods like , modifying active policies and thereby instantiating targets that would otherwise be blocked. Impact: Configurations controlling multiple entries can first remove entries from the target blocklist and then invoke the removed targets. Entries are processed in insertion order, consulting the same mutable module-level policies. This affects the default path without execution whitelisting. The v1.3 blocklist is a defense-in-depth measure, not a complete security boundary; applications should not treat arbitrary untrusted configurations as safe for instantiation or for Python logging configuration. Affected Versions Affected Versions: - >= 1.3.4, = 1.4.0.dev4, < 1.4.0.dev10 Fixed Versions: - 1.3.7 - 1.4.0.dev10 Remediation Fix Details: The fix makes the runtime policy state immutable and checks integrity, preventing access or modification of Hydra internals through access or modification of Hydra's internal and protected Python implementation state. Target authorization now covers canonical resolution identifiers, aliases, discovery results, callable results, delayed callables, and runtime parameters. The patch also rejects configuration-driven code, policy, and process environment mutations, as well as unformatted introspection and formatting traversals that might expose protected runtime capabilities. User Advisory: Users should upgrade to 1.3.7 on the stable branch or 1.4.0.dev10 on the development branch. POC Code

Goal Reached Thanks to every supporter — we hit 100%!

Hydra-core _instantiate() Target Blocklist Bypass Vulnerability (RCE) Analysis

More from this source