What’s Vulnerable › Products

ray-project ray vulnerabilities

7 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your ray-project ray version is affected

Exploited ray-project ray vulnerabilities

• CVE-2025-62593 — Ray-Project Ray Code Injection Vulnerability

Latest ray-project ray vulnerabilities

• CVE-2026-57516 — Ray < 2.56.0 Unsafe Deserialization RCE via WebDataset Reader (CVSS 8.8)
• CVE-2026-41486 — Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization (CVSS 8.8)
• CVE-2026-32981 — Ray Dashboard <= 2.8.0 Path Traversal Leading to Local File Disclosure (CVSS 7.5)
• CVE-2026-27482 — Ray: Dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion) (CVSS 6.5)
• CVE-2025-62593 — Ray-Project Ray Code Injection Vulnerability (CVSS 8.8) — exploited
• CVE-2023-48023 — (CVSS 9.1)
• CVE-2023-48022 — (CVSS 9.8)