Vulnerabilities

TI-2026-41407 CVE-2026-57516 · GHSA-hhrp-gw25-jr43

Ray < 2.56.0 Unsafe Deserialization RCE via WebDataset Reader

HIGH 72

Ray prior to 2.56.0 contains an unsafe deserialization vulnerability in the WebDataset reader that allows attackers to achieve remote code execution by supplying a malicious tar archive to the read_webdataset() function.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00858 Published 2026-07-01 Partial fix · 2.56.0 CWE-502

TI-2026-30073 CVE-2026-41486 · GHSA-mw35-8rx3-xf9r

Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization

MEDIUM 47

Ray is an AI compute engine.

CVSS 4.0HIGH 8.9 Network No auth User interaction EPSS 0.00473 Published 2026-05-08 Partial fix · 2.55.0 CWE-502

TI-2026-25429 CVE-2026-32981 · GHSA-j3mh-qmjj-xp83

Ray Dashboard <= 2.8.0 Path Traversal Leading to Local File Disclosure

HIGH 77

A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00966 Published 2026-03-17 Partial fix · 2.8.1 CWE-22

TI-2026-21889 CVE-2026-27482 · GHSA-q5fh-2hc8-f6rq

Ray: Dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)

MEDIUM 62

Ray is an AI compute engine.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00307 Published 2026-02-21 Fixed in 2.54.0 CWE-396

TI-2025-38808 CVE-2025-62593 · GHSA-q279-jhrf-cc6v

Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack

CRITICAL 100KEV

Ray is an AI compute engine.

CVSS 4.0CRITICAL 9.4 Network No auth User interaction EPSS 0.6015 Published 2025-11-26 Partial fix · 2.52.0 CWE-352

TI-2023-26003 CVE-2023-48023 · GHSA-3xqf-mvhg-35j8

Anyscale Ray 2.6.3 and 2.8.0 allows /log_proxy SSRF.

HIGH 80

Anyscale Ray 2.6.3 and 2.8.0 allows /log_proxy SSRF.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.35296 Published 2023-11-28 No fix listed CWE-918

TI-2023-26002 CVE-2023-48022 · GHSA-6wgj-66m2-xxp2

Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the…

CRITICAL 90

Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.83942 Published 2023-11-28 Fixed CWE-918

Vulnerabilities

Filters

Ray < 2.56.0 Unsafe Deserialization RCE via WebDataset Reader

Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization

Ray Dashboard <= 2.8.0 Path Traversal Leading to Local File Disclosure

Ray: Dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)

Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack

Anyscale Ray 2.6.3 and 2.8.0 allows /log_proxy SSRF.

Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the…