CVE-2026-57516
Last modified
CVE-2026-57516 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. Ray prior to 2.56.0 contains an unsafe deserialization vulnerability in the WebDataset reader that allows attackers to achieve remote code execution by supplying a malicious tar archive to the read_webdataset() function. The _default_decoder() function in webdataset_datasource.py unconditionally calls pickle.loads() on tar entries with .pkl/.pickle extensions and torch.load() with weights_only=False on .pt/.pth entries, executing arbitrary code inside Ray remote workers on every worker that processes the malicious archive.. EPSS estimates a 0.49% chance of exploitation in the next 30 days.
Description
Ray prior to 2.56.0 contains an unsafe deserialization vulnerability in the WebDataset reader that allows attackers to achieve remote code execution by supplying a malicious tar archive to the read_webdataset() function. The _default_decoder() function in webdataset_datasource.py unconditionally calls pickle.loads() on tar entries with .pkl/.pickle extensions and torch.load() with weights_only=False on .pt/.pth entries, executing arbitrary code inside Ray remote workers on every worker that processes the malicious archive.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Anyscale | Ray | < 2.56.0 |
References
- https://github.com/ray-project/ray/pull/63469Issue Tracking, Patch
- https://github.com/ray-project/ray/pull/63470Issue Tracking, Patch
- https://github.com/ray-project/ray/releases/tag/ray-2.56.0Product, Release Notes
- https://github.com/ray-project/ray/security/advisories/GHSA-hhrp-gw25-jr43Exploit, Mitigation, Patch, Vendor Advisory
- https://github.com/ray-project/ray/security/advisories/GHSA-hhrp-gw25-jr43Exploit, Mitigation, Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-57516?
How severe is CVE-2026-57516?
How do I fix CVE-2026-57516?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-57495AgenticMail gives AI agents real email addresses and phone n…8.2
- CVE-2026-57498Coolify is an open-source and self-hostable tool for managin…9.6
- CVE-2026-5750An insecure direct object reference (IDOR) vulnerability in …7.6
- CVE-2026-57501Zen is a firefox-based browser. Prior to 1.21.5b, Zen's glan…0
- CVE-2026-57510SuperPlane before 0.27.0 contains a broken object-level auth…8.8
- CVE-2026-57511SuperPlane before 0.30.0 contains an SMTP header injection v…6.3
- CVE-2026-57517Control Web Panel before 0.9.8.1225 contains a blind SQL inj…9.8
- CVE-2026-57518Pagekit CMS 1.0.18 contains a privilege escalation vulnerabi…8.8
- CVE-2026-5752Sandbox Escape Vulnerability in Terrarium allows arbitrary c…9.3
- CVE-2026-57520Bitwarden Server before 2026.5.0 contains a privilege escala…7.1
- CVE-2026-57521Bitwarden Server before 2026.5.0 contains a broken access co…5.3
- CVE-2026-57522Bitwarden Server before 2026.5.0 contains a JSON injection v…5
Are you affected by CVE-2026-57516?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST