ShadowRay: First Known Attack Campaign Targeting AI Workloads Exploited In The Wild
oligo.security · Undated · Licence: not cleared; local research copy only
CVEs this report names
5 CVEs- CVE-2023-48022Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission APIPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report83.9%Top 0.31%73.4priority
- CVE-2023-6019Ray Command Injection in cpu_profile Parameterray-project · ray-project/rayPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report74.6%Top 0.5%36.7priority
- CVE-2023-48023Anyscale Ray 2.6.3 and 2.8.0 allows /log_proxy SSRFPublic exploitCritical · 9.11 report35.3%Top 1.6%36.0priority
- CVE-2023-6021Ray Log File Local File Includeray-project · ray-project/rayPublic exploitHigh · 7.51 report37.1%Top 1.5%34.9priority
- CVE-2023-6020Ray Static File Local File Includeray-project · ray-project/rayPublic exploitHigh · 7.51 report14.7%Top 3.3%34.5priority
Where it names them
CVE-2023-48022 Original (opens in a new tab) ↗ Original (opens in a new tab) ↗ Original (opens in a new tab) ↗ Original (opens in a new tab) ↗ Original (opens in a new tab) ↗
While four of the reported vulnerabilities were fixed in Ray version 2.8.1, the fifth CVE (CVE-2023-48022) remains disputed, meaning that it was not considered a risk and was not addressed with an immediate fix.
Because CVE-2023-48022 was disputed, many development teams (and most static scanning tools) are not aware that this vulnerability should concern them.
Researchers at Oligo Security have observed instances of CVE-2023-48022 being actively exploited in the wild, making the disputed CVE a “shadow vulnerability”—a CVE that doesn’t show up in static scans but can still lead to breaches and significant losses.
The Story of CVE-2023-48022: ShadowRay Explained
The story of CVE-2023-48022: ShadowRay Explained
CVE-2023-6019 Original (opens in a new tab) ↗
https://www.anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023 https://bishopfox.com/blog/ray-versions-2-6-3-2-8-0 https://huntr.com/bounties/787a07c0-5535-469f-8c53-3efa4e5717c7/
CVE-2023-48023 Original (opens in a new tab) ↗
https://www.anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023 https://bishopfox.com/blog/ray-versions-2-6-3-2-8-0 https://huntr.com/bounties/787a07c0-5535-469f-8c53-3efa4e5717c7/
CVE-2023-6021 Original (opens in a new tab) ↗
https://www.anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023 https://bishopfox.com/blog/ray-versions-2-6-3-2-8-0 https://huntr.com/bounties/787a07c0-5535-469f-8c53-3efa4e5717c7/
CVE-2023-6020 Original (opens in a new tab) ↗
https://www.anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023 https://bishopfox.com/blog/ray-versions-2-6-3-2-8-0 https://huntr.com/bounties/787a07c0-5535-469f-8c53-3efa4e5717c7/
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.