Database/AI/ML frameworks & serving
Ray Data (Arrow extension types): Custom Arrow extension types deserialized unsafely
CVSS 8.8CVE-2026-41486AI/ML frameworks & servingcurated
Impact
Custom Arrow extension types deserialized unsafely
Who can reach it
Customer-supplied Arrow/Parquet dataset
What to do
Upgrade to 2.55.0+
References
Related entries
- JupyterLab: extension allow-list not enforced, letting a notebook user install arbitrary PyPI packagesCVE-2026-42266 · JupyterLab (PyPI Extension Manager, allowed_extensions_uris allow-list)High
- LiteLLM proxy: Two endpoints allow privilege escalation / unauthorized actionCVE-2026-42271 · LiteLLM proxyHigh
- BentoML (`bentofile.yaml`): Malicious build manifestCVE-2026-44346 · BentoML (`bentofile.yaml`)High
- ChromaDB (SimpleRBAC): Authorization provider evaluates permissions incorrectlyCVE-2026-45831 · ChromaDB (SimpleRBAC)High
- ChromaDB (V1 endpoints): Tenant/database passed as `None` to the authz layerCVE-2026-45832 · ChromaDB (V1 endpoints)High
- ChromaDB: Authenticated code injectionCVE-2026-45833 · ChromaDBHigh
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.