Skip to content
Ray, Versions 2.6.3, 2.8.0
bishopfox.com | blog | #vulnerability-disclosure | #ai-infrastructure | #ssrf | #input-validation | #missing-authentication | #ray | #anyscale
Summary
Bishop Fox disclosed three Ray vulnerabilities—missing authentication, SSRF and insecure input validation—that can give attackers OS access to cluster nodes; Ray 2.8.1 fixes two, isolation is advised.
- Published
- Collected