Medium severity · published Feb 21, 2026
CVE-2026-27482
Ray: Dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)
6.5
CVSS
0.3%
EPSS
No
On KEV
Description
Ray is an AI compute engine. In versions 2.53.0 and below, thedashboard HTTP server blocks browser-origin POST/PUT but does not cover DELETE, and key DELETE endpoints are unauthenticated by default. If the dashboard/agent is reachable (e.g., --dashboard-host=0.0.0.0), a web page via DNS rebinding or same-network access can issue DELETE requests that shut down Serve or delete jobs without user interaction. This is a drive-by availability impact. The fix for this vulnerability is to update to Ray 2.54.0 or higher.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
None
Integrity
Low
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
ray · ray-project
< 2.54.0 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-27482
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-27482
Patch
https://github.com/ray-project/ray/commit/0fda8b824cdc9dc6edd763bb28dfd7d1cc9b02a4
Issue Tracking
https://github.com/ray-project/ray/pull/60526
Product
https://github.com/ray-project/ray/releases/tag/ray-2.54.0
Exploit
https://github.com/ray-project/ray/security/advisories/GHSA-q5fh-2hc8-f6rq
More from ray
8.8
CVE-2025-62593
Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack
9.8
CVE-2023-6019
A command injection existed in Ray's cpu_profile URL parameter allowing attackers to execute os commands on the system running the ray dashboard remotely without authentication
8.8
CVE-2026-41486
Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization
7.5
CVE-2026-32981
Ray Dashboard <= 2.8.0 Path Traversal Leading to Local File Disclosure
7.5
CVE-2023-6020
LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication