---
id: 3939
title: "Ray, Versions 2.6.3, 2.8.0"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/ray-versions-2-6-3-2-8-0"
published_at: "2023-11-27T00:00:00Z"
tags: ["vulnerability-disclosure", "ai-infrastructure", "ssrf", "input-validation", "missing-authentication", "ray", "anyscale"]
phying_url: "https://phying.com/item/3939"
lang: en
---

# Ray, Versions 2.6.3, 2.8.0

## Summary

Bishop Fox disclosed three Ray vulnerabilities—missing authentication, SSRF and insecure input validation—that can give attackers OS access to cluster nodes; Ray 2.8.1 fixes two, isolation is advised.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2023-11-27T00:00:00Z
- **Original:** https://bishopfox.com/blog/ray-versions-2-6-3-2-8-0
- **Phying News:** https://phying.com/item/3939