CVE-2026-57516— Ray < 2.56.0 Unsafe Deserialization RCE via WebDataset Reader
Possible ATT&CK Techniques 2AI
T1059 · Command and Scripting Interpreter T1203 · Exploitation for Client ExecutionAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Anyscale, Inc | Ray | < 2.56.0 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-57516
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Ray < 2.56.0 Unsafe Deserialization RCE via WebDataset Reader
Source: NVD (National Vulnerability Database)
Vulnerability Description
Ray prior to 2.56.0 contains an unsafe deserialization vulnerability in the WebDataset reader that allows attackers to achieve remote code execution by supplying a malicious tar archive to the read_webdataset() function. The _default_decoder() function in webdataset_datasource.py unconditionally calls pickle.loads() on tar entries with .pkl/.pickle extensions and torch.load() with weights_only=False on .pt/.pth entries, executing arbitrary code inside Ray remote workers on every worker that processes the malicious archive.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
可信数据的反序列化
Source: NVD (National Vulnerability Database)
Vulnerability Title
ray-project ray 反序列化漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
ray-project Ray是ray-project组织开源的一个用于扩展 AI 和 Python 应用程序的统一框架。 ray-project ray 2.56.0之前版本存在反序列化漏洞，该漏洞源于WebDataset reader中存在不安全的反序列化，允许攻击者通过向read_webdataset()函数提供恶意tar归档文件实现远程代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Anyscale, Inc | Ray | 0 ~ 2.56.0 | - |
II. Public POCs for CVE-2026-57516
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-57516
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-57516 (2)
Vendor Advisories for CVE-2026-57516 (2)
Other References for CVE-2026-57516 (1)
- 🔗 Release Ray-2.56.0 · ray-project/ray · GitHubrelease-notes
IV. Related Vulnerabilities
Same product: Ray
- CVE-2026-41486
Ray: Remote Code Execution via Parquet Arrow Extension Type - CVE-2026-32981
Ray Dashboard <= 2.8.0 Path Traversal Leading to Local File - CVE-2026-27482
Ray: Dashboard DELETE endpoints allow unauthenticated browse - CVE-2025-62593
Ray is vulnerable to RCE via Safari & Firefox Browsers throu - CVE-2025-1979
ray 日志信息泄露漏洞
Same weakness: CWE-502
- CVE-2026-63767
ktransformers Unauthenticated Pickle Deserialization RCE via - CVE-2026-28220
Wazuh cluster DAPI arbitrary callable deserialization and RB - CVE-2026-12484
Unsafe Deserialization in keras.layers.TorchModuleWrapper.fr - CVE-2026-8476
Disk Cache Deserialization Remote Code Execution Vulnerabili - CVE-2026-45162
Pimcore: Unsafe PHP Deserialization in Multiple Locations Wi
V. Comments for CVE-2026-57516
No comments yet