Lucene search
+L

3 matches found

osv_pysec
osv_pysec
•added 2026/06/29 11:50 a.m.•29 views

PYSEC-2026-518 Ray's New Token Authentication is Disabled By Default

Anyscale Ray 2.52.0 contains an insecure default configuration in which token-based authentication for Ray management interfaces including the dashboard and Jobs API is disabled unless explicitly enabled by setting RAYAUTHMODE=token. In the default unauthenticated state, a remote attacker with...

9.3CVSS6.8AI score0.00474EPSS
SaveExploits0References12
Github Security Blog
Github Security Blog
•added 2025/11/27 3:30 a.m.•75 views

Ray's New Token Authentication is Disabled By Default

Anyscale Ray 2.52.0 contains an insecure default configuration in which token-based authentication for Ray management interfaces including the dashboard and Jobs API is disabled unless explicitly enabled by setting RAYAUTHMODE=token. In the default unauthenticated state, a remote attacker with...

6.8AI score0.00474EPSS
SaveExploits0References10Affected Software1
EUVD
EUVD
•added 2025/11/27 2:45 a.m.•29 views

EUVD-2025-199783

Anyscale Ray 2.52.0 contains an insecure default configuration in which token-based authentication for Ray management interfaces including the dashboard and Jobs API is disabled unless explicitly enabled by setting RAYAUTHMODE=token. In the default unauthenticated state, a remote attacker with...

9.3CVSS6.8AI score0.00474EPSS
SaveExploits0References4
Rows per page
Query Builder