| Component | Ray |
| Severity | critical (CVSS 9.1) |
| CVSS vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
| Published (NVD) | 2023-11-28 |
| Last modified | 2026-06-17 |
| Affected versions | = 2.6.3 = 2.8.0 |
| Fixed in | see the vendor advisory |
| Weakness | CWE-918 |
| CISA KEV | not listed |
NVD description
Anyscale Ray 2.6.3 and 2.8.0 allows /log_proxy SSRF. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment
What to do
- No fixed release is known yet: follow the vendor advisory below and keep Ray off the public internet until a fix ships.
- Do not expose the component's API or UI to the internet without authentication in front of it.