Cyber Resilience

CVE-2026-27482

Anyscale Ray ≤ 2.54.0

Public PoC
Published
21 February 2026
Modified
04 March 2026
Patch / advisory
CVSS Score v3.1 5.9
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H
EPSS Score 0.0026 17th percentile
Risk Priority 44 floored blend · peak EPSS

Summary

CVE-2026-27482 is a medium-severity Declaration of Catch for Generic Exception (CWE-396) vulnerability in Anyscale Ray. Its CVSS base score is 5.9 (Medium).

Operationally, ranked at the 17th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

This vulnerability is AI-related — categorised as Other Platforms; in the Supply Chain and Deployment risk domain.

The strongest mitigations our analysis identified map to SA-11 (Developer Testing and Evaluation) and SA-15 (Development Process, Standards, and Tools) — see the control section below for these in your framework.

OWASP Top 10 for Web (2025)

EU & UK References

Vulnerability Data

Ray is an AI compute engine. In versions 2.53.0 and below, thedashboard HTTP server blocks browser-origin POST/PUT but does not cover DELETE, and key DELETE endpoints are unauthenticated by default. If the dashboard/agent is reachable (e.g., --dashboard-host=0.0.0.0), a web page…

more

via DNS rebinding or same-network access can issue DELETE requests that shut down Serve or delete jobs without user interaction. This is a drive-by availability impact. The fix for this vulnerability is to update to Ray 2.54.0 or higher.

CWE(s)

AI Security AnalysisAI

AI Category
Other Platforms
Risk Domain
Supply Chain and Deployment
OWASP Top 10 for LLMs 2025
None mapped
Classification Reason
Matched keywords: ai

Related Threats

CVEs Like This One

CVE-2023-48022Same product: Anyscale Ray
CVE-2026-32981Same product: Anyscale Ray
CVE-2023-48023Same product: Anyscale Ray
CVE-2026-57516Same product: Anyscale Ray
CVE-2026-41486Same product: Anyscale Ray
CVE-2026-40149Shared CWE-396

Affected Assets

anyscale
ray
≤ 2.54.0

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)

Detect
Catch it (NIST detect / respond)

Harden
Shrink the surface (DISA STIG)

Validate
Prove the fix (OWASP ASVS)
  • V16.5.1

Mitigating Controls (NIST 800-53 r5) AI

Developer testing and evaluation (including static analysis and code review) directly finds declarations of overly generic catch blocks.

Requiring documented development standards and tools can mandate specific exception-handling rules that prohibit generic catches.

Security engineering principles include explicit requirements for precise, least-privilege exception handling rather than broad catches.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 mostly match
prevents

Secure SDLC practices directly enforce specific exception handling as part of coding standards, though the control addresses the full development lifecycle beyond this single weakness.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

finds

Security testing in development can detect generic catch blocks, but does not guarantee their removal.

prevents

Secure SDLC processes encourage disciplined exception handling, yet the control itself does not mandate specific coding rules.

prevents

Secure coding standards explicitly prohibit overly broad exception handlers that mask errors and create exploitable paths.

References