Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-08-23 · high
It scores 7.8 on CVSS, letting a malicious _target_ config value in Hydra run arbitrary code, per GitHub's advisory.
Why now: It's part of the August 23 advisory coverage because the fix already shipped, not because of a reported exploit.
Hydra's instantiate() function runs arbitrary code named in a config's target field, a flaw GitHub scores 7.8 out of 10 on the CVSS scale. The advisory tracks it as CVE-2026-68508 and covers every release up to 1.3.3.
Any app that loads config from an untrusted source can get hijacked. Instead of building the object it asked for, it runs someone else's code. Hydra isn't a network service on its own. The advisory says you need something layered on top that feeds instantiate() a value an attacker controls. That could be a config file, a CLI override, or metadata bundled with a downloaded model.
That third path is the one worth checking. Agent pipelines routinely call instantiate() on components described in a config shipped alongside a downloaded checkpoint. The checkpoint's author doesn't have to be trustworthy for that to work. Nothing in the normal flow stops target from naming a function that does more than build a model.
The fix is a version bump to 1.3.4. GitHub's advisory doesn't say whether the patch validates target against an allowlist or just changes how instantiate() resolves imports. That's worth checking before assuming a partial config still works.
Each link below shares sources, entities, or timing with this story.
Shared entities / Same source domain / Shared topic
Both cover CVE, CVSS, GHSA; reported by the same outlet (github.com); overlapping topics (agent, checkpoint, cover).
Shared entities / Same source domain
Both cover Affects, CVE, CVSS, GHSA; reported by the same outlet (github.com).
Shared entities / Shared topic / Earlier coverage
Both cover CVE, CVSS; overlapping topics (agent, check, code, component, config); earlier CVE coverage from 2026-03-03.
Both cover CLI, CVE, CVSS; overlapping topics (agent, code, config); earlier CLI coverage from 2026-06-26.
Both cover Affects, CVE, CVSS; overlapping topics (affect, agent, config); earlier Affects coverage from 2026-06-08.
Shared entities / Shared topic / Earlier coverage / Tension
Both cover CVE, CVSS; overlapping topics (affect, component, cover, cvss); earlier CVE coverage from 2026-02-21.
Shared entities / Shared topic / Earlier coverage
Both cover CLI, CVE, CVSS; overlapping topics (agent, cvss); earlier CLI coverage from 2026-04-04.
Shared entities / Same source domain / Shared topic / What happened next
Both cover CVE, GHSA; reported by the same outlet (github.com); overlapping topics (agent, cover).