anyscale has 3 CVEs on record between 2025 and 2026. The median CVSS is 8.8 (high).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 33% vs 1% corpus
- Median CVSS
- 8.8
- Publish → KEV
- —(1)
- Last 90 days
- 0 prev 1
Worst active — by depth score
CVE-2025-62593High· 8.8Ray is an AI compute engine85CVE-2026-57516High· 8.8Ray prior to 2.56.0 contains an unsafe deserialization vulnerability in the WebDataset reader that allows attackers to achieve remote code execution by supplying a malicious tar archive to the read_webdataset() function61CVE-2026-32981High· 7.5A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.153
anyscale vulnerabilities
CVEs affecting anyscale, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-57516High· 8.8PoCRay prior to 2.56.0 contains an unsafe deserialization vulnerability in the WebDataset reader that allows attackers to achieve remote code execution by supplying a malicious tar archive to the read_webdataset() function
Ray prior to 2.56.0 contains an unsafe deserialization vulnerability in the WebDataset reader that allows attackers to achieve remote code execution by supplying a malicious tar archive to the read_webdataset() function. The _default_dec…
CVE-2026-32981High· 7.5PoCA path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1
A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied paths in the static file handling mechanism, an attacker can …
CVE-2025-62593High· 8.8CISA KEVPoCRay is an AI compute engine
Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient gu…