PT-2025-54704

Anyscale Ray 2.52.0 contains an insecure default configuration in which token-based authentication for Ray management interfaces including the dashboard and Jobs API is disabled unless explicitly enabled by setting RAY AUTH MODE=token. In the default unauthenticated state, a remote attacker with...