ray-project

Products

ProductCVEsExploitedLatest
Ray41May 8, 2026
ray-project/ray3–Nov 16, 2023

Exploited and recent CVEs

  • CVE-2025-62593 Critical 9.4 Exploited Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack 60.2%
  • CVE-2026-41486 High 8.9 Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization 0.5%
  • CVE-2026-32981 High 7.5 Ray Dashboard <= 2.8.0 Path Traversal Leading to Local File Disclosure 1.0%
  • CVE-2026-27482 Medium 5.9 Ray: Dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion) 0.3%
  • CVE-2023-6020 High 7.5 Ray Static File Local File Include 14.7%
  • CVE-2023-6019 Critical 9.8 Ray Command Injection in cpu_profile Parameter 74.6%
  • CVE-2023-6021 High 7.5 Ray Log File Local File Include 37.1%