Cloudanix VulnDB

CVE-2025-34351

Critical · 9.8

Ray's New Token Authentication is Disabled By Default

CVSS

9.8

EPSS

—

Published

Nov 27, 2025

CISA due date

—

The record

Anyscale Ray 2.52.0 contains an insecure default configuration in which token-based authentication for Ray management interfaces (including the dashboard and Jobs API) is disabled unless explicitly enabled by setting RAY_AUTH_MODE=token. In the default unauthenticated state, a remote attacker with network access to these interfaces can submit jobs and execute arbitrary code on the Ray cluster. NOTE: The vendor plans to enable token authentication by default in a future release. They recommend enabling token authentication to protect your cluster from unauthorized access.

Affected packages

Ecosystem Package Introduced Fixed
PyPI ray 0 No fix
Chainguard airflow-3 0 0
Chainguard airflow-3-bitnami-compat 0 0
Chainguard airflow-3-compat 0 0
Chainguard airflow-3-iamguarded-compat 0 0
Chainguard py3-vllm-cuda-12.4 0 0.11.2-r1
Chainguard py3.10-vllm-cuda-12.4 0 0.11.2-r1
Chainguard py3.12-vllm-cuda-12.4 0 0.11.2-r1
Wolfi airflow-3 0 0
Wolfi airflow-3-bitnami-compat 0 0
Wolfi airflow-3-compat 0 0
Wolfi airflow-3-iamguarded-compat 0 0

Related vulnerabilities