PYSEC-2026-2272

Ray is an AI compute engine. From version 2.54.0 to before version 2.55.0, Ray Data registers custom Arrow extension types ray.data.arrowtensor, ray.data.arrowtensorv2, ray.data.arrowvariableshapedtensor globally in PyArrow. When PyArrow reads a Parquet file containing one of these extension type...

Ray 2.49.0 < 2.55.0 Remote Code Execution (CVE-2026-41486)

The version of Ray installed on the remote host is = 2.49.0 and prior to 2.55.0. It is, therefore, affected by a remote code execution vulnerability: - Ray Data registers custom Arrow extension types globally in PyArrow. When PyArrow reads a Parquet file containing one of these extension types, i...