Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack
Affected range
ECOSYSTEM: introduced 0; fixed 2.52.0Fixed versions: 2.52.0
ray
Ray provides a simple, universal API for building distributed applications.
PyPI latest 2.58.0 Apache 2.0
Evidence path
Version, exploitation, severity
RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.
1
Latest version
2.58.0
No matching published advisory returned
2
Known exploitation
No KEV match
Checked by exact CVE identifier
3
Highest advisory severity
Critical
11 active advisories
Check an exact version
The registry confirms the version, then OSV checks advisories for that exact value.
Published records
Advisories
GHSA-gx77-xgc2-4888 critical
Ray's New Token Authentication is Disabled By Default
Affected range
ECOSYSTEM: introduced 0; last affected 2.52.0 GHSA-6wgj-66m2-xxp2 critical
Ray has arbitrary code execution via jobs submission API
Affected range
ECOSYSTEM: introduced 0; last affected 2.49.2 GHSA-6cxr-8q3m-jwrr critical
Ray Missing Authorization vulnerability
Affected range
ECOSYSTEM: introduced 0; fixed 2.8.1Fixed versions: 2.8.1
GHSA-3pww-qvr8-6mhp critical
Ray Path Traversal vulnerability
Affected range
ECOSYSTEM: introduced 0; fixed 2.8.1Fixed versions: 2.8.1
GHSA-h3xg-wv58-5p43 critical
Ray OS Command Injection vulnerability
Affected range
ECOSYSTEM: introduced 0; fixed 2.8.1Fixed versions: 2.8.1
GHSA-mw35-8rx3-xf9r high
Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization
Affected range
ECOSYSTEM: introduced 2.49.0; fixed 2.55.0ECOSYSTEM: introduced 0; last affected 2.54.0Fixed versions: 2.55.0
GHSA-hhrp-gw25-jr43 high
Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)
Affected range
ECOSYSTEM: introduced 0; fixed 2.56.0Fixed versions: 2.56.0
GHSA-j3mh-qmjj-xp83 high
Ray Dashboard is vulnerable to path traversal through its static file handling mechanism
Affected range
ECOSYSTEM: introduced 0; fixed 2.8.1Fixed versions: 2.8.1
GHSA-q5fh-2hc8-f6rq moderate
Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)
Affected range
ECOSYSTEM: introduced 0; fixed 2.54.0Fixed versions: 2.54.0
GHSA-w4rh-fgx7-q63m moderate
ray vulnerable to Insertion of Sensitive Information into Log File
Affected range
ECOSYSTEM: introduced 0; fixed 2.43.0GIT: introduced 0; fixed 64a2e4010522d60b90c389634f24df77b603d85dFixed versions: 2.43.0, 64a2e4010522d60b90c389634f24df77b603d85d