CVE-2026-106440: Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method
hydra-optuna-sweeper accepted a configuration-controlled dotted path in
hydra.sweeper.custom_search_space, resolved it with the lower-level
hydra.utils.get_method() API, and later invoked the returned callable.
Hydra’s object-lookup helpers intentionally trust their input and do not apply
the execution policy used by instantiate() and logging configuration. As a
result, untrusted Optuna multirun configuration could select installed Python
code for execution in the Hydra controller process.
References
- github.com/advisories/GHSA-5jjj-9xc3-rm56
- github.com/hydra-ecosystem/hydra/commit/0dd18084589a3d3e577d1f1a8a48fb485c94a5e6
- github.com/hydra-ecosystem/hydra/commit/4720dfca2bde27fa140ec287a05709668fbdf168
- github.com/hydra-ecosystem/hydra/releases/tag/v1.3.7
- github.com/hydra-ecosystem/hydra/security/advisories/GHSA-5jjj-9xc3-rm56
- nvd.nist.gov/vuln/detail/CVE-2026-106440
Code Behaviors & Features
Detect and mitigate CVE-2026-106440 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →