CVE-2026-57516: Deserialization of Untrusted Data in Anyscale, Inc Ray
Ray prior to 2.56.0 contains an unsafe deserialization vulnerability in the WebDataset reader that allows attackers to achieve remote code execution by supplying a malicious tar archive to the read_webdataset() function. The _default_decoder() function in webdataset_datasource.py unconditionally calls pickle.loads() on tar entries with .pkl/.pickle extensions and torch.load() with weights_only=False on .pt/.pth entries, executing arbitrary code inside Ray remote workers on every worker that processes the malicious archive.
AI Analysis
Technical Summary
CVE-2026-57516 is a deserialization vulnerability in Anyscale, Inc's Ray product affecting versions prior to 2.56.0. The WebDataset reader's _default_decoder() function unsafely deserializes data from tar archives by calling pickle.loads() on .pkl/.pickle files and torch.load() on .pt/.pth files with weights_only=false. This allows an attacker who can supply a crafted tar archive to the read_webdataset() function to execute arbitrary code remotely on every Ray worker processing the archive. The vulnerability has a CVSS 4.0 score of 8.6 (high severity) and does not require privileges or user interaction but does require network access.
Potential Impact
Successful exploitation results in remote code execution on Ray remote workers processing the malicious tar archive. This can lead to full compromise of the affected worker processes, potentially allowing attackers to execute arbitrary commands and control the environment where Ray workloads run.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch link is provided, users should avoid processing untrusted tar archives with the read_webdataset() function in Ray versions prior to 2.56.0. Monitor vendor channels for updates and apply official patches once available.
CVE-2026-57516: Deserialization of Untrusted Data in Anyscale, Inc Ray
Description
Ray prior to 2.56.0 contains an unsafe deserialization vulnerability in the WebDataset reader that allows attackers to achieve remote code execution by supplying a malicious tar archive to the read_webdataset() function. The _default_decoder() function in webdataset_datasource.py unconditionally calls pickle.loads() on tar entries with .pkl/.pickle extensions and torch.load() with weights_only=False on .pt/.pth entries, executing arbitrary code inside Ray remote workers on every worker that processes the malicious archive.
CVSS v4.0
Score 8.6high
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-57516 is a deserialization vulnerability in Anyscale, Inc's Ray product affecting versions prior to 2.56.0. The WebDataset reader's _default_decoder() function unsafely deserializes data from tar archives by calling pickle.loads() on .pkl/.pickle files and torch.load() on .pt/.pth files with weights_only=false. This allows an attacker who can supply a crafted tar archive to the read_webdataset() function to execute arbitrary code remotely on every Ray worker processing the archive. The vulnerability has a CVSS 4.0 score of 8.6 (high severity) and does not require privileges or user interaction but does require network access.
Potential Impact
Successful exploitation results in remote code execution on Ray remote workers processing the malicious tar archive. This can lead to full compromise of the affected worker processes, potentially allowing attackers to execute arbitrary commands and control the environment where Ray workloads run.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch link is provided, users should avoid processing untrusted tar archives with the read_webdataset() function in Ray versions prior to 2.56.0. Monitor vendor channels for updates and apply official patches once available.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-06-24T15:58:58.537Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a45492b27e9c79719d6212a
Added to database: 07/01/2026, 17:06:51 UTC
Last enriched: 07/01/2026, 17:21:17 UTC
Last updated: 07/01/2026, 18:37:15 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.