Vulnerabilities for ray

First version without a known vulnerability: 2.56.0

Details

• GHSA-hhrp-gw25-jr432026-07-24

  Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)

  Fixed in: 2.56.0

• GHSA-mw35-8rx3-xf9r2026-04-24

  Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization

  Fixed in: 2.55.0

• GHSA-j3mh-qmjj-xp832026-03-17

  Ray Dashboard is vulnerable to path traversal through its static file handling mechanism

  Fixed in: 2.8.1

• GHSA-q5fh-2hc8-f6rq2026-02-20

  Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)

  Fixed in: 2.54.0

• GHSA-gx77-xgc2-48882025-11-27

  Ray's New Token Authentication is Disabled By Default

• GHSA-q279-jhrf-cc6v2025-11-26

  Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack

  Fixed in: 2.52.0

• GHSA-w4rh-fgx7-q63m2025-03-06

  ray vulnerable to Insertion of Sensitive Information into Log File

  Fixed in: 2.43.0, 64a2e4010522d60b90c389634f24df77b603d85d

• GHSA-6wgj-66m2-xxp22023-11-28

  Ray has arbitrary code execution via jobs submission API

• GHSA-6cxr-8q3m-jwrr2023-11-16

  Ray Missing Authorization vulnerability

  Fixed in: 2.8.1

• GHSA-3pww-qvr8-6mhp2023-11-16

  Ray Path Traversal vulnerability

  Fixed in: 2.8.1

• GHSA-h3xg-wv58-5p432023-11-16

  Ray OS Command Injection vulnerability

  Fixed in: 2.8.1