CVE-2023-48022
criticalpriority · attend · 78OT risk · highEPSS 0.839 · 100 %ileexploit · weaponizedEURUUSEPSS · scored 2026-10-26
Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment. (Also, within that environment, customers at version 2.52.0 and later can choose to use token authentication.)
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
exploits (3)
Public proof-of-concept and weaponised exploit code.
- exploit/linux/http/ray_agent_job_rceRay Agent Job RCEweaponized · metasploit
- 0x656565/CVE-2023-48022CVE-2023-48022 exploit modified from Bishop Fox workPoC · poc_in_github
- jakabakos/ShadowRay-RCE-PoC-CVE-2023-48022ShadowRay RCE POC (CVE-2023-48022)PoC · poc_in_github
affected products (6)
Products and version ranges known to be affected.
advisories (2)
Vendor and ecosystem advisories describing this.
- GHSA-6wgj-66m2-xxp2Ray has arbitrary code execution via jobs submission API2023-11-28ghsa · osvUS
Anyscale Ray allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment.
- PYSEC-2026-517Ray has arbitrary code execution via jobs submission API2026-06-29vendor · osvUS
Anyscale Ray allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment.
also known as (7)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (17)
External citations — patches, advisories, analysis.
- https://atlas.mitre.org/studies/AML.CS0023cnnvd
- https://bishopfox.com/blog/ray-versions-2-6-3-2-8-0cnnvd
- https://docs.ray.io/en/latest/ray-security/index.htmlcnnvd
- https://docs.ray.io/en/latest/ray-security/token-auth.htmlcnnvd
- https://www.vicarius.io/vsociety/posts/shadowray-cve-2023-48022-exploitcnnvd
- https://www.vicarius.io/vsociety/posts/the-story-of-shadowray-cve-2023-48022cnnvd
- https://atlas.mitre.org/studies/AML.CS0023enisa_euvd
- https://bishopfox.com/blog/ray-versions-2-6-3-2-8-0enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan