{
 "id": "AIR-2025-0049",
 "slug": "shadowray-active-exploitation-of-exposed-ray-clusters",
 "title": "ShadowRay Active Exploitation of Exposed Ray Clusters",
 "summary": "Threat actors actively exploited unauthenticated and exposed Ray clusters over several months for remote code execution. The attacks compromised significant computing resources and valuable enterprise data.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln",
  "agent_hijack"
 ],
 "severity": 3,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Ray"
 ],
 "incident_date": "2023-09-05",
 "incident_date_precision": "day",
 "first_reported": "2023-11-28",
 "sources": [
  {
   "url": "https://github.com/advisories/GHSA-6wgj-66m2-xxp2",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2023-48022: Ray has arbitrary code execution via jobs submission API",
   "published_at": "2023-11-28"
  },
  {
   "url": "https://atlas.mitre.org/studies/AML.CS0023",
   "publisher": "MITRE ATLAS",
   "title": "ShadowRay: Hijacking Exposed Ray Clusters",
   "published_at": "2025-03-14"
  },
  {
   "url": "https://anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023",
   "publisher": "anyscale.com",
   "title": "Anyscale Update on CVEs",
   "published_at": "2025-03-14"
  },
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-48022",
   "publisher": "NVD",
   "title": "CVE-2023-48022",
   "published_at": "2025-03-14"
  },
  {
   "url": "https://oligo.security/blog/shadowray-attack-ai-workloads-actively-exploited-in-the-wild",
   "publisher": "oligo.security",
   "title": "ShadowRay: First Known Attack Campaign Targeting AI Workloads Actively Exploited In The Wild",
   "published_at": "2025-03-14"
  },
  {
   "url": "https://protectai.com/threat-research/shadowray-ai-infrastructure-is-being-exploited-in-the-wild",
   "publisher": "Protect AI",
   "title": "ShadowRay: AI Infrastructure Is Being Exploited In the Wild",
   "published_at": "2025-03-14"
  }
 ],
 "source_count": 6,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_atlas",
 "tags": [
  "shadowray",
  "ray",
  "remote-code-execution",
  "CVE-2023-48022"
 ],
 "created_at": "2026-10-18T06:55:08.239Z",
 "updated_at": "2026-10-18T07:00:14.101Z"
}