CVE-2026-115749Low· 3.3▾ Sunlithydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.dev4 before 1.4.0rc2 contains an arbitrary module import vulnerability via the ray_pkg_version OmegaConf resolver passing input to importlib.import_module(). Attackers controlling conf…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 18.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.dev4 before 1.4.0rc2 contains an arbitrary module import vulnerability via the ray_pkg_version OmegaConf resolver passing input to importlib.import_module(). Attackers controlling configuration values or command-line overrides can supply a ray_pkg_version interpolation to import any installed module, triggering its import-time side effects in the application process.
hydra-ray-launcher >= 1.1.0.dev1 < 1.2.2hydra-ray-launcher >= 1.4.0.dev4 < 1.4.0rc2Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-106439High· 8.5Hydra is a framework for elegantly configuring complex applications
CVE-2026-106440High· 7.8Hydra is a framework for elegantly configuring complex applications
CVE-2026-106441High· 7.8Hydra is a framework for elegantly configuring complex applications
CVE-2026-106442High· 7.8Hydra is a framework for elegantly configuring complex applications
CVE-2026-115931Critical· 9.9Arbitrary file read and backend crash through unrestricted provider method calls
CVE-2026-115886Medium· 6.5MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints