Ray vulnerabilities and CVEs
The Beam CVE database tracks 11 security advisories for Ray: 6 critical, 3 high and 2 medium severity. 1 is known to be exploited (CISA KEV). The newest is CVE-2026-57516, published Jul 24, 2026 and fixed in 2.56.0.
A distributed compute framework used for training and serving models, with a dashboard and jobs API.
Check your version: pip show ray
- Vulnerabilities tracked
- 11
- Critical
- 6
- Known exploited (CISA KEV)
- 1
- Published in the last 30 days
- 0
All entries, newest first
CVE-2026-57516
Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)
high8.8Jul 24, 2026CVE-2026-41486
Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization
high8.9Apr 24, 2026CVE-2026-32981
Ray Dashboard is vulnerable to path traversal through its static file handling mechanism
high7.5Mar 17, 2026CVE-2026-27482
Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)
medium5.9Feb 20, 2026CVE-2025-34351
Ray's New Token Authentication is Disabled By Default
critical9.3No fixNov 27, 2025CVE-2025-62593
Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack
critical9.4ExploitedNov 26, 2025CVE-2025-1979
ray vulnerable to Insertion of Sensitive Information into Log File
medium6.4Mar 6, 2025CVE-2023-48022
Ray has arbitrary code execution via jobs submission API
critical9.8No fixNov 28, 2023CVE-2023-6019
Ray OS Command Injection vulnerability
critical9.8Nov 16, 2023CVE-2023-6020
Ray Missing Authorization vulnerability
critical9.3Nov 16, 2023CVE-2023-6021
Ray Path Traversal vulnerability
critical9.3Nov 16, 2023