AI Score
Confidence
Low
EPSS
Percentile
98.1%
SSVC
Exploitation
poc
Automatable
yes
Technical Impact
total
Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor’s position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment
[
{
"cpes": [
"cpe:2.3:a:anyscale:ray:2.6.3:*:*:*:*:*:*:*"
],
"vendor": "anyscale",
"product": "ray",
"versions": [
{
"status": "affected",
"version": "2.6.3"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:anyscale:ray:2.8.0:*:*:*:*:*:*:*"
],
"vendor": "anyscale",
"product": "ray",
"versions": [
{
"status": "affected",
"version": "2.8.0"
}
],
"defaultStatus": "unknown"
}
]