Deserialization of Untrusted Data in Ray - CVE-2026-57516
Published: November 9, 2026
Vulnerability identifier: #VU163137
CSH Severity: High
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-57516
CWE-ID: CWE-502
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an unauthenticated remote attacker to execute arbitrary code with the privileges of the calling Ray process.
The vulnerability exists due to unsafe deserialization of pickle and PyTorch objects by the default decoder in ray.data.read_webdataset when reading WebDataset TAR archives. An unauthenticated remote attacker can supply a crafted archive and persuade a victim to load it through this API, causing code execution during schema sampling before row data is consumed.
Affected software
Ray
How to mitigate CVE-2026-57516
Install security update from vendor's website.
Ray - update to 2.56.0