Read the docs
TI-2026-21889 Aliases CVE-2026-27482GHSA-q5fh-2hc8-f6rq

Ray: Dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)

Priority MEDIUM 62CWE-396Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Security bypass
Confidentiality · integrity · availability
None · Low · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub. Impact type from CWE-306.

Summary

Ray is an AI compute engine. In versions 2.53.0 and below, thedashboard HTTP server blocks browser-origin POST/PUT but does not cover DELETE, and key DELETE endpoints are unauthenticated by default. If the dashboard/agent is reachable (e.g., --dashboard-host=0.0.0.0), a web page via DNS rebinding or same-network access can issue DELETE requests that shut down Serve or delete jobs without user interaction. This is a drive-by availability impact. The fix for this vulnerability is to update to Ray 2.54.0 or higher.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00307 23rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed ray (ray-project): 2.54.0ray (PyPI): 2.54.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Ray-Projectraybefore 2.54.02.54.0Patch availableCNA
—ray (PyPI)before 2.54.02.54.0Patch availableGHSA-q5fh-2hc8-f6rq
  • ray VendorRay-Project Affected before 2.54.0 Fixed in 2.54.0 Patch available CNA
  • ray (PyPI) Vendor— Affected before 2.54.0 Fixed in 2.54.0 Patch available GHSA-q5fh-2hc8-f6rq

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:anyscale:ray:*:*:*:*:*:*:*:*before 2.54.0VulnerableAnyscale, Inc
  • cpe:2.3:a:anyscale:ray:*:*:*:*:*:*:*:* Versions before 2.54.0 Vulnerable ·Anyscale, Inc

Remediation

  • Fix · CNA ray (ray-project) Fixed in 2.54.0
  • Fix · GHSA-q5fh-2hc8-f6rq ray (PyPI) Fixed in 2.54.0 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-27482
  2. 2026-10-03 Alias added: GHSA-q5fh-2hc8-f6rq

References

Exploit 1

Patch 2

Advisory 1

Other 2

  • TI-2025-38808 Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack KEVCVSS 4.0CRITICAL 9.4
  • TI-2023-05545 Ray Command Injection in cpu_profile Parameter CVSS 3.1CRITICAL 9.8
  • TI-2026-25429 Ray Dashboard <= 2.8.0 Path Traversal Leading to Local File Disclosure CVSS 4.0HIGH 8.7
  • TI-2023-05547 Ray Log File Local File Include CVSS 3.1HIGH 7.5
  • TI-2023-05546 Ray Static File Local File Include CVSS 3.1HIGH 7.5
  • TI-2026-30073 Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization CVSS 4.0HIGH 8.9

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences