Known vulnerabilities in Ray

Vendor: Anyscale
Software: Ray
Software CPE: cpe:2.3:a:anyscale:ray:*:*:*:*:*:*:*:*
Total vulnerabilities: 9
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Ray Ray is affected by 9 known vulnerabilities: 3 high, 6 medium Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU127508 - Improper input validation
CVE-2026-41486
CWE-20 High
Available
No
2.55.0 24.04.2026 SB2026042490
#VU123120 - Missing Authentication for Critical Function
CVE-2026-27482
CWE-306 Medium
Available
No
2.54.0 23.02.2026 SB2026022317
#VU119863 - Improper Authentication
CVE-2025-62593
CWE-287 Medium
No
Exploited
2.52.0 11.12.2025 SB2025121148
SB2025121642
SB2025121832
#VU87915 - Missing Authorization
CVE-2023-48022
CWE-862 High
Available
No
2.9.0 29.03.2024 SB2024032913
#VU87914 - Server-Side Request Forgery (SSRF)
CVE-2023-48023
CWE-918 Medium
No
No
2.8.1 29.03.2024 SB2024032913
#VU87913 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-6021
CWE-22 Medium
No
No
2.8.1 29.03.2024 SB2024032913
#VU87912 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-6020
CWE-22 Medium
Available
No
2.8.1 29.03.2024 SB2024032913
#VU87911 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-6019
CWE-78 High
Available
No
2.8.1 29.03.2024 SB2024032913
#VU58793 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-362 Medium
No
No
1.8.0 09.12.2021 SB2021120910