CVE-2026-27482
📋 TL;DR
This vulnerability in Ray AI compute engine allows unauthenticated DELETE requests to critical endpoints when the dashboard is exposed. Attackers can shut down Serve deployments or delete jobs via drive-by attacks using DNS rebinding or network access. Systems running Ray 2.53.0 or below with dashboard exposed are affected.
💻 Affected Systems
- Ray AI compute engine
📦 What is this software?
Ray by Anyscale
⚠️ Risk & Real-World Impact
Worst Case
Complete disruption of AI workloads through deletion of Serve deployments and jobs, causing significant availability impact and potential data loss.
Likely Case
Targeted attacks shutting down specific AI services or jobs, causing operational disruption and requiring redeployment.
If Mitigated
Minimal impact if dashboard is not exposed or proper network segmentation is in place.
🎯 Exploit Status
Simple HTTP DELETE requests to vulnerable endpoints. DNS rebinding or same-network access enables exploitation.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: 2.54.0 or higher
Vendor Advisory: https://github.com/ray-project/ray/security/advisories/GHSA-q5fh-2hc8-f6rq
Restart Required: Yes
Instructions:
1. Update Ray using pip: 'pip install --upgrade ray==2.54.0' 2. Restart all Ray services and processes 3. Verify dashboard endpoints now require authentication
🔧 Temporary Workarounds
Restrict Dashboard Access
allLimit dashboard exposure to trusted networks only
ray start --dashboard-host=127.0.0.1
ray start --dashboard-host=<trusted-ip>
Network Segmentation
linuxPlace Ray dashboard behind firewall with strict access controls
iptables -A INPUT -p tcp --dport 8265 -s <trusted-network> -j ACCEPT
iptables -A INPUT -p tcp --dport 8265 -j DROP
🧯 If You Can't Patch
- Implement strict network access controls to isolate Ray dashboard from untrusted networks
- Deploy web application firewall (WAF) to block unauthorized DELETE requests to Ray endpoints
🔍 How to Verify
Check if Vulnerable:
Check Ray version: 'ray --version' and verify if dashboard is exposed on network interfacesCheck Version:
ray --versionVerify Fix Applied:
Test DELETE requests to dashboard endpoints (e.g., /api/serve/deployments/) - should return authentication error in 2.54.0+📡 Detection & Monitoring
Log Indicators:
- Unauthenticated DELETE requests to /api/serve/ or /api/jobs/ endpoints
- Unexpected job deletions or Serve shutdown events
Network Indicators:
- HTTP DELETE requests to Ray dashboard port (default 8265) from unauthorized sources
- Multiple DELETE requests in short timeframe
SIEM Query:
source="ray-dashboard" AND (method="DELETE" AND (uri_path="/api/serve/*" OR uri_path="/api/jobs/*")) AND NOT user_authenticated=true