VULNERABILITY INTELLIGENCE

CVE-2026-57516

CVSS score8.6 HIGH
EPSS probability0.86%
CISA KEVNot currently listed
Published2026-07-01
Last modified2026-10-25
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Description

Ray prior to 2.56.0 contains an unsafe deserialization vulnerability in the WebDataset reader that allows attackers to achieve remote code execution by supplying a malicious tar archive to the read_webdataset() function. The _default_decoder() function in webdataset_datasource.py unconditionally calls pickle.loads() on tar entries with .pkl/.pickle extensions and torch.load() with weights_only=False on .pt/.pth entries, executing arbitrary code inside Ray remote workers on every worker that processes the malicious archive.

Weakness classification

  • CWE-502: Deserialization of Untrusted Data

Primary references