Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.9

Ray allows remote code execution via Parquet files

CVE-2026-41486 · published 6 months ago
Summary

Ray versions prior to 2.55.0 may run any code when a Parquet file containing special data types is opened. The problem occurs during file schema reading, letting an attacker execute commands on the server. Upgrade Ray to version 2.55.0 or later to close the issue.

What to do
  • Update ray team ray to version 2.55.0.
Affected software
Ecosystem VendorProductAffected versions
pip ray team ray >= 2.49.0, < 2.55.0
Fix: upgrade to 2.55.0
– anyscale ray 2.54.0
cpe:2.3:a:anyscale:ray:2.54.0:*:*:*:*:*:*:*
Original advisory text
Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization
Ray is an AI compute engine. From version 2.54.0 to before version 2.55.0, Ray Data registers custom Arrow extension types (ray.data.arrow_tensor, ray.data.arrow_tensor_v2, ray.data.arrow_variable_shaped_tensor) globally in PyArrow. When PyArrow reads a Parquet file containing one of these extension types, it calls __arrow_ext_deserialize__ on the field's metadata bytes. Ray's implementation passes these bytes directly to cloudpickle.loads(), achieving arbitrary code execution during schema parsing, before any row data is read. This issue has been patched in version 2.55.0.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.9 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-94Code Injection
CWE-502Deserialization of Untrusted Data
Timeline
Published8 May 2026
Updated30 Oct 2026
First seen24 Apr 2026
Sources
GHSA-mw35-8rx3-xf9r · GHSA
CVE-2026-41486 · NVD
GHSA-mw35-8rx3-xf9r · OSV
CVE-2026-41486 · OSV
Track software like this
Free during beta