Publish GHSA-gx77-xgc2-4888

Author: advisory-database[bot]

…-gx77-xgc2-4888/GHSA-gx77-xgc2-4888.json …-gx77-xgc2-4888/GHSA-gx77-xgc2-4888.jsonadvisories/unreviewed/2025/11/GHSA-gx77-xgc2-4888/GHSA-gx77-xgc2-4888.json renamed to advisories/github-reviewed/2025/11/GHSA-gx77-xgc2-4888/GHSA-gx77-xgc2-4888.json advisories/unreviewed/2025/11/GHSA-gx77-xgc2-4888/GHSA-gx77-xgc2-4888.json renamed to advisories/github-reviewed/2025/11/GHSA-gx77-xgc2-4888/GHSA-gx77-xgc2-4888.json

@@ -1,19 +1,40 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-gx77-xgc2-4888",
-  "modified": "2025-11-27T03:30:26Z",
+  "modified": "2025-12-01T20:51:10Z",
   "published": "2025-11-27T03:30:26Z",
   "aliases": [
     "CVE-2025-34351"
   ],
+  "summary": "Ray's New Token Authentication is Disabled By Default",
   "details": "Anyscale Ray 2.52.0 contains an insecure default configuration in which token-based authentication for Ray management interfaces (including the dashboard and Jobs API) is disabled unless explicitly enabled by setting RAY_AUTH_MODE=token. In the default unauthenticated state, a remote attacker with network access to these interfaces can submit jobs and execute arbitrary code on the Ray cluster. NOTE: The vendor plans to enable token authentication by default in a future release. They recommend enabling token authentication to protect your cluster from unauthorized access.",
   "severity": [
     {
       "type": "CVSS_V4",
-      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "ray"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "last_affected": "2.52.0"
+            }
+          ]
+        }
+      ]
     }
   ],
-  "affected": [],
   "references": [
     {
       "type": "WEB",
@@ -27,18 +48,43 @@
       "type": "WEB",
       "url": "https://docs.ray.io/en/latest/ray-security/token-auth.html"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/ray-project/ray"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/ray-project/ray/releases/tag/ray-2.52.0"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.cve.org/resourcessupport/allresources/cnarules#section_4-1_Vulnerability_Determination"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.linkedin.com/posts/jonathan-leitschuh_the-latest-piece-of-mind-bending-research-activity-7396976425997606912-qizE"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.oligo.security/blog/shadowray-2-0-attackers-turn-ai-against-itself-in-global-campaign-that-hijacks-ai-into-self-propagating-botnet"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.oligo.security/blog/shadowray-attack-ai-workloads-actively-exploited-in-the-wild"
+    },
     {
       "type": "WEB",
       "url": "https://www.vulncheck.com/advisories/anyscale-ray-token-authentication-disabled-by-default-insecure-configuration"
     }
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-1188"
+      "CWE-1188",
+      "CWE-304"
     ],
     "severity": "CRITICAL",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2025-12-01T20:51:10Z",
     "nvd_published_at": "2025-11-27T03:15:58Z"
   }
 }