Skip to content
ray-project
Exploited and recent CVEs
-
CVE-2025-62593
Critical 9.4 Exploited
Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack
60.2%
-
CVE-2026-41486
High 8.9
Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization
0.5%
-
CVE-2026-32981
High 7.5
Ray Dashboard <= 2.8.0 Path Traversal Leading to Local File Disclosure
1.0%
-
CVE-2026-27482
Medium 5.9
Ray: Dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)
0.3%
-
CVE-2023-6020
High 7.5
Ray Static File Local File Include
14.7%
-
CVE-2023-6019
Critical 9.8
Ray Command Injection in cpu_profile Parameter
74.6%
-
CVE-2023-6021
High 7.5
Ray Log File Local File Include
37.1%