{"schema":"threatline.record/2","record":{"id":"GHSA-h34c-q33w-3r7q","aliases":["GHSA-h34c-q33w-3r7q"],"summary":"Config-controlled module imports through the Ray version resolver","details":"### Summary\n\nThe hydra-ray-launcher plugin registers the `ray_pkg_version` OmegaConf\nresolver. In affected versions, a configuration interpolation can select a\nmodule for the resolver to import before reading the module's version.\nPlugin discovery registers this resolver even when another launcher is selected.\n\n### Impact\n\nAn attacker who controls configuration or CLI overrides can trigger an import\nin the application's process. Harmful impact requires an importable module\nwith a harmful import side effect. The resolver does not install attacker code\nor pass arbitrary function arguments. AWS credentials and Ray job execution\nare not prerequisites.\n\nHydra 1.4's target execution whitelist does not mediate this resolver path.\nHydra 1.3's target blocklist provides defense in depth; it is not a supported\nsecurity boundary for arbitrary untrusted configuration.\n\n### Affected versions\n\nAffected package: `hydra-ray-launcher`.\n\n- Legacy family: `>=1.1.0.dev1,<1.2.2`.\n- Hydra 1.4 family: `>=1.4.0.dev4,<1.4.0rc2`.\n\nThe earlier 0.1.x packages do not contain this resolver.\n\n### Patches\n\nPatched versions [1.2.2](https://pypi.org/project/hydra-ray-launcher/1.2.2/)\nand [1.4.0rc2](https://pypi.org/project/hydra-ray-launcher/1.4.0rc2/) are available\non PyPI. Their wheel and source distributions have been verified.\n\nThe fix reads installed distribution metadata instead of importing modules.\nUse distribution names for custom resolver arguments: replace\n`${ray_pkg_version:yaml}` with `${ray_pkg_version:PyYAML}`. The existing\n`hydra` argument remains an alias for `hydra-core`. Packages must be installed,\nincluding editable installations, or their versions supplied explicitly.\nThere is no import fallback when metadata is unavailable.\n\nThe patched legacy plugin requires Python 3.8 or newer. This makes explicit\nthe requirement of `importlib.metadata`, already used in plugin 1.2.1.\nThe Hydra 1.4 plugin retains its Python 3.10 minimum.\n\n### Workarounds\n\nUpgrade `hydra-ray-launcher` to 1.2.2 or 1.4.0rc2, depending on your release line.\n\nIf you cannot upgrade immediately, uninstall the plugin if unused and restart\nthe application, or restrict externally controlled configuration.\nSelecting another launcher alone does not prevent resolver registration.\n\n### Credit\n\nReported by @zachariah-mithani.\n","categories":["Unclassified"],"product":"hydra-ray-launcher","vendor":"","ecosystem":null,"affected_ranges":[{"source":"GitHub Advisory Database","source_url":"https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-h34c-q33w-3r7q","source_modified_at":"2026-10-21T12:27:08Z","fetched_at":"2026-10-23T19:00:29.328130Z","package":{"ecosystem":"pip","name":"hydra-ray-launcher"},"range":">=1.1.0.dev1,<1.2.2"},{"source":"GitHub Advisory Database","source_url":"https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-h34c-q33w-3r7q","source_modified_at":"2026-10-21T12:27:08Z","fetched_at":"2026-10-23T19:00:29.328130Z","package":{"ecosystem":"pip","name":"hydra-ray-launcher"},"range":">=1.4.0.dev4,<1.4.0rc2"}],"fixed_versions":[{"source":"GitHub Advisory Database","source_url":"https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-h34c-q33w-3r7q","source_modified_at":"2026-10-21T12:27:08Z","fetched_at":"2026-10-23T19:00:29.328130Z","package":{"ecosystem":"pip","name":"hydra-ray-launcher"},"version":"1.2.2"},{"source":"GitHub Advisory Database","source_url":"https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-h34c-q33w-3r7q","source_modified_at":"2026-10-21T12:27:08Z","fetched_at":"2026-10-23T19:00:29.328130Z","package":{"ecosystem":"pip","name":"hydra-ray-launcher"},"version":"1.4.0rc2"}],"cvss":3.3,"severity":"Low","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-21T12:27:08Z","modified_at":"2026-10-21T12:27:08Z","provenance":[{"source":"GitHub Advisory Database","url":"https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-h34c-q33w-3r7q","fetched_at":"2026-10-23T19:00:29.328130Z","source_modified_at":"2026-10-21T12:27:08Z"}],"sources":["GitHub Advisory Database"],"references":[],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-21T12:27:08Z","content_hash":"330cb73c2d12483ba6576354fbab0ba540a3ea765fbd4b9b93082f028b4e6cbe"}}