AI Threat Alert

Ray Vulnerabilities

pip MLOps

64

Risk Score

9

Total CVEs

6

Critical

pip

Ecosystem

Apr 24, 2026

Last CVE

78%

Patch Rate

186d

Avg Time to Patch

42,558 stars 7,577 forks 3,516 issues 846 dependents Last push May 17, 2026

OpenSSF Scorecard 5.8/10

Known Vulnerabilities (9 total, page 1 of 1)

Severity CVE ID Summary CVSS Published

HIGH CVE-2026-41486 Ray: Parquet RCE via Arrow extension deserialization -- Apr 24, 2026 CRITICAL CVE-2023-6019 Ray: unauthenticated RCE via dashboard command injection 9.8 Nov 16, 2023 CRITICAL CVE-2023-6020 Ray: unauthenticated LFI exposes entire filesystem 9.3 Nov 16, 2023 CRITICAL CVE-2023-6021 Ray: LFI allows unauthenticated file read 9.3 Nov 16, 2023 MEDIUM CVE-2025-1979 Ray: Redis password exposed via plaintext logging 6.4 Mar 6, 2025 CRITICAL CVE-2023-48022 Ray: unauthenticated RCE via job submission API 9.8 Nov 28, 2023 CRITICAL CVE-2025-62593 ray: Code Injection enables RCE -- Nov 26, 2025 CRITICAL CVE-2025-34351 ray: security flaw enables exploitation -- Nov 27, 2025 MEDIUM CVE-2026-27482 ray: Missing Auth allows unauthenticated access 5.9 Feb 20, 2026

Monitor Ray in your stack

Get instant alerts when new vulnerabilities affect Ray. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring