Executive brief
Ray OS Command Injection vulnerability
Affected products
- PyPI ray
Junglewise Threat Intelligence
CVE-2023-6019: PYSEC-2026-519 - Ray OS Command Injection vulnerability
CVE-2023-6019 · Severity: low · CVSS 3.1 · Published 2026-06-29
Technologies: ray (PyPI). Vendors: PyPI.
Related threats
- Ray unsafe deserialization in WebDataset and Parquet readers
- PYSEC-2026-515 - Ray Path Traversal vulnerability
- PYSEC-2026-517 - Ray has arbitrary code execution via jobs submission API
- PYSEC-2026-516 - Ray Missing Authorization vulnerability
- PYSEC-2026-518 - Ray's New Token Authentication is Disabled By Default