CVE-2026-41486

Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization

At a glance

Severity: HIGH 8.9
EPSS: EPSS 0.47 % · percentile 41 (2026-10-27)
State: PUBLISHED
Published: 2026-05-08
Updated: 2026-05-12
Assigner: GitHub_M
NVD status: Analyzed

Description

Ray is an AI compute engine. From version 2.54.0 to before version 2.55.0, Ray Data registers custom Arrow extension types (ray.data.arrow_tensor, ray.data.arrow_tensor_v2, ray.data.arrow_variable_shaped_tensor) globally in PyArrow. When PyArrow reads a Parquet file containing one of these extension types, it calls __arrow_ext_deserialize__ on the field's metadata bytes. Ray's implementation passes these bytes directly to cloudpickle.loads(), achieving arbitrary code execution during schema parsing, before any row data is read. This issue has been patched in version 2.55.0.

Scores

Version	Score	Vector	Scored by
CVSS 4.0	HIGH 8.9	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H	GitHub_M
CVSS 4.0	HIGH 8.9	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X	NVD · security-advisories@github.com (Secondary)
CVSS 3.1	HIGH 8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	NVD · nvd@nist.gov (Primary)

Weaknesses (CWE)

Advisories

GHSA-mw35-8rx3-xf9r — Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization
PYSEC-2026-2272 — Ray is an AI compute engine. From version 2.54.0 to before version 2.55.0, Ray Data registers custom Arrow extension types (ray.data.arrow_tensor, ray.data.arro
PYSEC-2026-2296 — Ray is an AI compute engine. From version 2.54.0 to before version 2.55.0, Ray Data registers custom Arrow extension types (ray.data.arrow_tensor, ray.data.arro

European references

ENISA EUVD · EUVD-2026-28828
GCVE · GCVE-0-2026-41486

Affected configurations (NVD CPE)

cpe:2.3:a:anyscale:ray:2.54.0:*:*:*:*:*:*:*

Affected products

Product	Versions
ray-project · ray	affected >= 2.54.0, < 2.55.0

References

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD