ShadowRay Active Exploitation of Exposed Ray Clusters

# ShadowRay Active Exploitation of Exposed Ray Clusters

https://gcdradar.vercel.app/incidents/shadowray-active-exploitation-of-exposed-ray-clusters · AIR-2025-0049 · closed 2025-03-28

- Lane: Patch now
- Severity: 3 (Confirmed exploitation)
- Fix status: Fix status unknown
- First reported: 2023-11-28 (happened 2023-09-05)
- AI role: Attack on AI
- Products: Ray
- CVE ids: CVE-2023-48022
- CVSS: 9.8

## Summary

Threat actors actively exploited unauthenticated and exposed Ray clusters over several months for remote code execution. The attacks compromised significant computing resources and valuable enterprise data.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-03-14: ShadowRay: AI Infrastructure Is Being Exploited In the Wild (https://protectai.com/threat-research/shadowray-ai-infrastructure-is-being-exploited-in-the-wild)
- 2025-03-14: ShadowRay: First Known Attack Campaign Targeting AI Workloads Actively Exploited In The Wild (https://oligo.security/blog/shadowray-attack-ai-workloads-actively-exploited-in-the-wild)
- 2025-03-14: CVE-2023-48022 (https://nvd.nist.gov/vuln/detail/CVE-2023-48022)
- 2025-03-14: Anyscale Update on CVEs (https://anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023)
- 2025-03-14: ShadowRay: Hijacking Exposed Ray Clusters (https://atlas.mitre.org/studies/AML.CS0023)

## Sources

- 2023-11-28 GitHub Advisory Database: CVE-2023-48022: Ray has arbitrary code execution via jobs submission API https://github.com/advisories/GHSA-6wgj-66m2-xxp2
- 2025-03-14 MITRE ATLAS: ShadowRay: Hijacking Exposed Ray Clusters https://atlas.mitre.org/studies/AML.CS0023
- 2025-03-14 anyscale.com: Anyscale Update on CVEs https://anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023
- 2025-03-14 NVD: CVE-2023-48022 https://nvd.nist.gov/vuln/detail/CVE-2023-48022
- 2025-03-14 oligo.security: ShadowRay: First Known Attack Campaign Targeting AI Workloads Actively Exploited In The Wild https://oligo.security/blog/shadowray-attack-ai-workloads-actively-exploited-in-the-wild
- 2025-03-14 Protect AI: ShadowRay: AI Infrastructure Is Being Exploited In the Wild https://protectai.com/threat-research/shadowray-ai-infrastructure-is-being-exploited-in-the-wild

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.