TI-2025-38808 CVE-2025-62593 · GHSA-q279-jhrf-cc6v
Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack
Priority CRITICAL 100KEV
Ray is an AI compute engine.
Ray-Project
Records7All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Ray-Project records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
7 records
TI-2023-05545 CVE-2023-6019 · GHSA-h3xg-wv58-5p43
Ray Command Injection in cpu_profile Parameter
Priority HIGH 81
A command injection existed in Ray's cpu_profile URL parameter allowing attackers to execute os commands on the system running the ray dashboard remotely without authentication.
TI-2026-25429 CVE-2026-32981 · GHSA-j3mh-qmjj-xp83
Ray Dashboard <= 2.8.0 Path Traversal Leading to Local File Disclosure
Priority HIGH 77
A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1.
TI-2023-05547 CVE-2023-6021 · GHSA-3pww-qvr8-6mhp
Ray Log File Local File Include
Priority HIGH 72
LFI in Ray's log API endpoint allows attackers to read any file on the server without authentication.
TI-2026-21889 CVE-2026-27482 · GHSA-q5fh-2hc8-f6rq
Ray: Dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)
Priority MEDIUM 62
Ray is an AI compute engine.
TI-2023-05546 CVE-2023-6020 · GHSA-6cxr-8q3m-jwrr
Ray Static File Local File Include
Priority MEDIUM 48
LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication.
TI-2026-30073 CVE-2026-41486 · GHSA-mw35-8rx3-xf9r
Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization
Priority MEDIUM 47
Ray is an AI compute engine.