PyPI/ray CVE-2026-57516: high 8.8, EPSS 0.86%

Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)

Action: Upgrade ray to 2.56.0 or later.

pip install ray==2.56.0

Affected

Fixed versions

Sources

• osv: GHSA-hhrp-gw25-jr43
• https://github.com/ray-project/ray/security/advisories/GHSA-hhrp-gw25-jr43
• https://nvd.nist.gov/vuln/detail/CVE-2026-57516
• https://github.com/ray-project/ray/pull/63469
• https://github.com/ray-project/ray/pull/63470
• https://github.com/ray-project/ray/commit/41443a18f9e6403a072de69098a279c23e2d943c
• https://github.com/pypa/advisory-database/tree/main/vulns/ray/PYSEC-2026-2273.yaml
• https://github.com/ray-project/ray
• https://github.com/ray-project/ray/releases/tag/ray-2.56.0
• https://www.vulncheck.com/advisories/ray-unsafe-deserialization-rce-via-webdataset-reader

CVE-2026-57516 · published 2026-07-24T15:47:38Z · modified 2026-09-10T03:50:52.427940507Z · JSON