CVE-2026-115749

hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.dev4 before 1.4.0rc2 contains an arbitrary module import vulnerability via the raypkgversion OmegaConf resolver passing input to importlib.importmodule. Attackers controlling configuration values or command-line overrides can supply a...

CVE-2026-115749 hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.dev4 before 1.4.0rc2 Arbitrary Module Import

hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.dev4 before 1.4.0rc2 contains an arbitrary module import vulnerability via the raypkgversion OmegaConf resolver passing input to importlib.importmodule. Attackers controlling configuration values or command-line overrides can supply a...

CVE-2026-115749 hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.dev4 before 1.4.0rc2 Arbitrary Module Import

hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.dev4 before 1.4.0rc2 contains an arbitrary module import vulnerability via the raypkgversion OmegaConf resolver passing input to importlib.importmodule. Attackers controlling configuration values or command-line overrides can supply a...

CVE-2026-115749

The hydra-ray-launcher software (versions 1.1.0.dev1 before 1.2.2 and 1.4.0.dev4 before 1.4.0rc2 ) is vulnerable to an arbitrary module import vulnerability. This flaw exists in the ray_pkg_version OmegaConf resolver , which improperly passes input to importlib.import_module() . An attacker who c...

EUVD-2026-108957

hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.dev4 before 1.4.0rc2 contains an arbitrary module import vulnerability via the raypkgversion OmegaConf resolver passing input to importlib.importmodule. Attackers controlling configuration values or command-line overrides can supply a...