CVE-2026-57516

[CVE catalog]

A flaw was found in Ray. This unsafe deserialization vulnerability in the WebDataset reader allows a remote attacker to achieve arbitrary code execution. By supplying a specially crafted malicious tar archive to the read_webdataset() function, an attacker can trigger the unconditional deserialization of .pkl/.pickle or .pt/.pth entries, leading to the execution of arbitrary code within Ray remote workers. ray: Ray: Remote code execution via unsafe deserialization in WebDataset reader This Important vulnerability in Ray's WebDataset reader allows for remote code execution. An attacker could exploit this by providing a specially crafted tar archive to the `read_webdataset()` function, leading to arbitrary code execution within Ray remote workers. This risk is present in Red Hat environments where Ray is deployed to process untrusted data archives, as the deserialization of malicious content occurs unconditionally. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Severity

High · CVSS 8.8CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Published

Jul 1, 2026, 4:36:55 PM UTC

Source

[NVD] · [CVE record]

EPSS

0.86% · Oct 27, 2026

{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "ray",
      "ecosystem": "cpe",
      "fixed_version": "2.56.0"
    },
    {
      "name": "ray",
      "ecosystem": "pip",
      "fixed_version": "2.56.0"
    },
    {
      "name": "ray",
      "ranges": [
        {
          "fixed": "2.56.0",
          "introduced": "",
          "last_affected": "",
          "start_excluding": ""
        }
      ],
      "ecosystem": "cpe",
      "fixed_version": "2.56.0",
      "provider_record_id": "NVD-CVE-2026-57516"
    }
  ]
}