| Ray: Remote Code Execution via Parquet Arrow Extension Type DeserializationCVE-2026-41486 · GHSA-MW35-8RX3-XF9RVersion ranges need review. |
rayve-ray |
PyPI |
High
|
Fix reported |
|
| Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)CVE-2026-27482 · GHSA-Q5FH-2HC8-F6RQVersion ranges need review. |
ray |
PyPI |
Medium
|
Fix reported |
|
| Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding AttackCVE-2025-62593 · GHSA-Q279-JHRF-CC6VVersion ranges need review. |
rayRed Hat OpenShift AI (RHOAI)/rhoai/odh-vllm-cuda-rhel9 |
PyPIRed Hat |
Critical
|
Fix reported |
|
| Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)CVE-2026-57516 · GHSA-HHRP-GW25-JR43Version ranges need review. |
rayRed Hat AI Inference Server/rhaii/vllm-gaudi-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| Ray's New Token Authentication is Disabled By DefaultCVE-2025-34351 · GHSA-GX77-XGC2-4888Version ranges need review. |
ray |
PyPI |
Critical
|
No fix reported |
|
| ray vulnerable to Insertion of Sensitive Information into Log FileCVE-2025-1979 · GHSA-W4RH-FGX7-Q63MVersion ranges need review. |
rayRed Hat Enterprise Linux AI (RHEL AI)/ui-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Ray Missing Authorization vulnerabilityCVE-2023-6020 · GHSA-6CXR-8Q3M-JWRRVersion ranges need review. |
ray |
PyPI |
Critical
|
Fix reported |
|
| Ray has arbitrary code execution via jobs submission APICVE-2023-48022 · GHSA-6WGJ-66M2-XXP2Version ranges need review. |
ray |
PyPI |
Critical
|
No fix reported |
|
| Ray Path Traversal vulnerabilityCVE-2023-6021 · GHSA-3PWW-QVR8-6MHPVersion ranges need review. |
ray |
PyPI |
Critical
|
Fix reported |
|
| Ray OS Command Injection vulnerabilityCVE-2023-6019 · GHSA-H3XG-WV58-5P43Version ranges need review. |
ray |
PyPI |
Critical
|
Fix reported |
|
| Ray Dashboard is vulnerable to path traversal through its static file handling mechanismCVE-2026-32981 · GHSA-J3MH-QMJJ-XP83Version ranges need review. |
rayRed Hat AI Inference Server/rhaiis-preview/vllm-cuda-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
