CVE-2025-34351

Name of the Vulnerable Software and Affected Versions Anyscale Ray version 2.52.0

Description Anyscale Ray 2.52.0 has a default configuration where token-based authentication for Ray management interfaces, including the dashboard and Jobs API, is disabled unless explicitly enabled by setting the RAY AUTH MODE variable to 'token'. Without authentication enabled, a remote attacker with network access to these interfaces can submit jobs and execute arbitrary code on the Ray cluster. The API endpoint for job submission is vulnerable.

Recommendations Enable token authentication by setting the RAY AUTH MODE variable to 'token' to protect the cluster from unauthorized access.