No fixed version published. Check the advisory or remove the package.
Affected versions
| If you run | Upgrade to |
|---|---|
| 2.49.2 and earlier | No fix published |
CVE-2023-48022 Public exploit Critical · 9.8 EPSS 83.9%
Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API
Summary
Anyscale Ray versions 2.6.3 and 2.8.0 contain a flaw in the job submission API that allows arbitrary code execution. A remote attacker with network access can exploit it without authentication or user interaction, though the vendor states Ray is not intended for use outside a strictly controlled network and notes that token authentication is available from version 2.52.0 onward.
Official description · CVE.org
Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment. (Also, within that environment, customers at version 2.52.0 and later can choose to use token authentication.)
Priority scorePatchfirst’s 0 to 100 ranking. It adds points for CISA KEV listing, ransomware use, EPSS, threat reports, public exploit code and CVSS. Every CVE page shows the breakdown. Breakdown
73.4 / 100
- Exploited
- Yes, in VulnCheck KEV
- Reports
- 1
- Tactics
- 2/15
How an attack unfolds
Based on MITRE ATT&CKA public catalogue of the techniques attackers use, maintained by MITRE. Patchfirst uses it to describe what attackers do with a vulnerability. mappings. Select a step to see the evidence.Exploitation timelineDated milestones for a CVE: when it was disclosed, when exploit code became public, when exploitation was confirmed, and when threat reports named it.
First seen exploited 4 months after disclosure. Public exploit code (Metasploit) was available 13 days before disclosure.
- Public exploit codeMetasploit13 days before
- Disclosedday 0
- First seen exploitedVulnCheck KEV evidence+4 mo
MITRE ATT&CKA public catalogue of the techniques attackers use, maintained by MITRE. Patchfirst uses it to describe what attackers do with a vulnerability. techniques
2 TechniqueOne specific attacker behaviour in MITRE ATT&CK, such as T1190 “Exploit Public-Facing Application”. IDs with a dot, like T1059.004, are sub-techniques., grouped by TacticThe attacker’s goal at a stage of an attack in MITRE ATT&CK, such as Initial Access or Persistence. Each technique belongs to one or more tactics. in kill-chain order, 2 cited passages 2Initial AccessTA0001
Exploit Public-Facing Application T1190 Medium Confidence (technique links)How sure Patchfirst is that an ATT&CK technique applies to this CVE. High and medium links are shown by default; low ones come from early or generic mappings, text matching, or contradict the CVE’s details.
AI mapping from the description · how it is exploited
remote exploitation of public-facing job submission API
allows a remote attacker to execute arbitrary code via the job submission API
ExecutionTA0002
Command and Scripting Interpreter T1059 Medium Confidence (technique links)How sure Patchfirst is that an ATT&CK technique applies to this CVE. High and medium links are shown by default; low ones come from early or generic mappings, text matching, or contradict the CVE’s details.
AI mapping from the description · primary impact
arbitrary code execution on the host
allows a remote attacker to execute arbitrary code
Detection
0 rules for this CVE · 244 general rules for its techniquesRules for this CVE
0Sigma ruleAn open, vendor-neutral detection rule for log data. Security teams convert Sigma rules into searches for their own SIEM. that reference CVE-2023-48022 directly.CVE-specific rules are not available in this build. Search SigmaHQ ↗
General rules for this CVE’s techniques
These detect the technique in general, not this specific vulnerability.
Exploit Public-Facing ApplicationT1190149 general rules
- Arcadyan Router Exploitationscriticaltest
- Citrix ADS Exploitation CVE-2020-8193 CVE-2020-8195criticaltest
- Citrix Netscaler Attack CVE-2019-19781criticaltest
- Confluence Exploitation CVE-2019-3398criticaltest
- CVE-2010-5278 Exploitation Attemptcriticaltest
- CVE-2020-0688 Exchange Exploitation via Web Logcriticaltest
- CVE-2020-10148 SolarWinds Orion API Auth Bypasscriticaltest
- CVE-2020-5902 F5 BIG-IP Exploitation Attemptcriticaltest
Command and Scripting InterpreterT105995 general rules
- HackTool - Sliver C2 Implant Activity Patterncriticaltest
- Lazarus Group Activitycriticaltest
- REvil Kaseya Incident Malware Patternscriticaltest
- Turla Group Lateral Movementcriticaltest
- Windows Defender AMSI Trigger Detectedhighstable
- Windows Defender Threat Detectedhighstable
- Abusable DLL Potential Sideloading From Suspicious Locationhightest
- Add Insecure Download Source To Wingethightest
Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.
Am I affected? What do I upgrade to?
From GitHub Security Advisories and OSV1 package in 1 ecosystem. Main package: ray.
What security researchers reported
Named in 1 threat report1 reportoligo.security
Reports are matched by finding the exact id CVE-2023-48022 in their text; nobody has reviewed the match. One passage is shown per report, at most 320 characters, linked to the original.
ShadowRay: First Known Attack Campaign Targeting AI Workloads Exploited In The Wild
Researchers at Oligo Security have observed instances of CVE-2023-48022 being actively exploited in the wild, making the disputed CVE a “shadow vulnerability”—a CVE that doesn’t show up in static scans but can still lead to breaches and significant losses.
4 passages name itOriginal (opens in a new tab) ↗
Also mentioned in 15 community threat pulses (AlienVault OTX)
Weaker evidencePulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.
- N4D Mesh Controller: New infrastructure, a UPX-packed agent labeled "go-titan," and how to hunt for it21 Aug 2026
- N4D Mesh Controller: New infrastructure, a UPX-packed agent labeled "go-titan," and how to hunt for it20 Aug 2026
- EbeeAug2026 Pt519 Aug 2026
- *Dormant Destruction* VirusTotal report for index.html10 May 2026
- Spam “Broken Seal” DocuSign-themed Delivery w/Fileless Process Hollowing (Zeppelin/Bloat-A) by msudosos22 Mar 2026
- Spam “Broken Seal” DocuSign-themed Delivery w/Fileless Process Hollowing (Zeppelin/Bloat-A) by msudosos22 Mar 2026
- 9 more on OTX