---
id: CVE-2026-106441
title: Hydra is a framework for elegantly configuring complex applications
summary: >-
  Hydra is a framework for elegantly configuring complex applications. Prior to
  1.3.6 and 1.4.0.dev9, Hydra passes Python logging configuration to
  logging.config.dictConfig() without applying Hydra's target policy to handler
  class values o…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
cwe:
  - CWE-94
  - CWE-470
vendor: hydra-ecosystem
product: hydra
affected:
  - hydra < 1.3.6
  - 'hydra >= 1.4.0.dev0, < 1.4.0.dev9'
patched:
  - hydra-core 1.3.6
  - hydra-core 1.4.0.dev9
published: '2026-10-06'
updated: '2026-10-07'
sourceUpdated: '2026-10-07T19:17:32.150'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-106441'
references:
  - url: >-
      https://github.com/hydra-ecosystem/hydra/commit/76bfc30ce1f3105416941dd2e3a562568e369120
    label: security-advisories@github.com
  - url: >-
      https://github.com/hydra-ecosystem/hydra/commit/ff3e4dba890c29a21d8c2bb867ee87d37ccf21d0
    label: security-advisories@github.com
  - url: 'https://github.com/hydra-ecosystem/hydra/pull/3420'
    label: security-advisories@github.com
  - url: >-
      https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-c3wx-c55w-pxjq
    label: security-advisories@github.com
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-106441'
  - url: 'https://github.com/hydra-ecosystem/hydra/releases/tag/v1.3.6'
  - url: 'https://github.com/advisories/GHSA-c3wx-c55w-pxjq'
  - url: 'https://github.com/hydra-ecosystem/hydra'
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106441.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-106441'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2547635'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-106441'
  - url: 'https://access.redhat.com/errata/RHSA-2026:82415'
  - url: 'https://access.redhat.com/errata/RHSA-2026:82368'
  - url: 'https://pypi.org/project/hydra-core'
tags:
  - nvd
  - cve.org
  - ghsa
  - pip
  - osv
  - csaf
  - vex
  - red-hat
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-07T18:49:11.628391Z'
aliases:
  - GHSA-c3wx-c55w-pxjq
  - PYSEC-2026-4221
ecosystem: pip
ingestedAt: '2026-10-06T19:13:33.852Z'
epss: 0.00165
epssPercentile: 0.05731
---

## Overview

Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.6 and 1.4.0.dev9, Hydra passes Python logging configuration to logging.config.dictConfig() without applying Hydra's target policy to handler class values or formatter, filter, handler, queue, and listener factories. An attacker who controls Hydra logging configuration can therefore select an importable class or factory and cause it to be invoked with the application's privileges, even in versions where instantiate() is protected because the logging path does not use instantiate(). This issue is fixed in versions 1.3.6 and 1.4.0.dev9.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Package advisory (CVE-2026-106441)

Affected packages:

- `hydra-core < 1.3.6`
- `hydra-core >= 1.4.0.dev0, < 1.4.0.dev9`

Patched in:

- `hydra-core 1.3.6`
- `hydra-core 1.4.0.dev9`

Source: https://github.com/advisories/GHSA-c3wx-c55w-pxjq

## Vendor advisories

- **RHSA-2026:82415** · Red Hat · fixed in: Red Hat AI Inference Server 3.5 · released 2026-10-13 · [advisory](https://access.redhat.com/errata/RHSA-2026:82415)
- **RHSA-2026:82368** · Red Hat · fixed in: Red Hat AI Inference Server 3.5 · released 2026-10-13 · [advisory](https://access.redhat.com/errata/RHSA-2026:82368)
- **Red Hat VEX** · Important · affected: Red Hat AI Inference Server, Red Hat Enterprise Linux AI (RHEL AI) 3 · no fix planned: Red Hat AI Inference Server, Red Hat Enterprise Linux AI (RHEL AI) 3 · updated 2026-10-14 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106441.json)