{"id":"CVE-2023-6019","published":"2023-11-16T16:12:07Z","modified":"2024-08-02T08:21:17Z","title":"Ray Command Injection in cpu_profile Parameter","vendor":"ray-project","product":"ray-project/ray","tier":"core","eol":null,"affectedVersions":[{"vendor":"ray-project","product":"ray-project/ray","versions":[">= unspecified, <= latest"]}],"description":{"text":"A command injection existed in Ray's cpu_profile URL parameter allowing attackers to execute os commands on the system running the ray dashboard remotely without authentication. The issue is fixed in version 2.8.1+. Ray maintainers' response can be found here: https://www.anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023","provenance":"source","from":"CVE.org"},"summary":{"text":"A command injection flaw in the cpu_profile URL parameter of the Ray dashboard, part of the ray-project/ray product, lets an attacker run OS commands on the host running the dashboard. The attack is remote and requires no authentication, no user interaction, and only network access to the dashboard.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:15:30Z"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.7463,"percentile":0.99499,"date":"2026-10-31","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":null,"cwes":[{"id":"CWE-78","name":"Improper Neutralization of Special Elements used in an OS Command"}],"references":[{"url":"https://huntr.com/bounties/d0290f3c-b302-4161-89f2-c13bb28b4cfe","tags":[]}],"techniques":[{"id":"T1190","name":"Exploit Public-Facing Application","tactics":["initial-access"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: remote unauthenticated exploit via dashboard URL parameter","mappingType":"exploitation_technique","evidence":[{"from":"description","quote":"allowing attackers to execute os commands on the system running the ray dashboard remotely without authentication","start":63,"end":176}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"},{"id":"T1059","name":"Command and Scripting Interpreter","tactics":["execution"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: OS command execution on host","mappingType":"primary_impact","evidence":[{"from":"description","quote":"allowing attackers to execute os commands on the system","start":63,"end":118}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"}],"reports":[{"id":"SRC-21b639fa149328c86d0e","title":"ShadowRay: First Known Attack Campaign Targeting AI Workloads Exploited In The Wild","publisher":"oligo.security","url":"https://www.oligo.security/blog/shadowray-attack-ai-workloads-actively-exploited-in-the-wild","date":null,"mentions":[{"quote":"https://www.anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023‍[2] https://bishopfox.com/blog/ray-versions-2-6-3-2-8-0‍[3] https://huntr.com/bounties/787a07c0-5535-469f-8c53-3efa4e5717c7/‍[4]","start":25028,"end":25277}]}],"affected":[{"ecosystem":"PyPI","package":"ray","vulnerableRanges":["<2.8.1"],"patched":["2.8.1"],"from":["GHSA-h3xg-wv58-5p43","PYSEC-2026-519"],"provenance":"source"}],"advisories":[{"id":"GHSA-h3xg-wv58-5p43","url":"https://github.com/advisories/GHSA-h3xg-wv58-5p43","severity":"CRITICAL","ecosystem":"PyPI","package":"ray","vulnerableRanges":["<2.8.1"],"patched":["2.8.1"],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2023-2970","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-2970","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":51978,"url":"https://www.exploit-db.com/exploits/51978","title":"Ray OS v2.6.3 - Command Injection RCE(Unauthorized)","type":"webapps","platform":"python","date":"2024-04-12","verified":false,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2024-04-12"},"pocGithub":{"count":3,"skipped":1,"earliest":"2024-04-10","earliestUrl":"https://github.com/FireWolfWang/CVE-2023-6019","repos":[{"name":"joaquinrrr/CVE-2023-6019","url":"https://github.com/joaquinrrr/CVE-2023-6019","stars":6,"created":"2026-06-19"},{"name":"Clydeston/CVE-2023-6019","url":"https://github.com/Clydeston/CVE-2023-6019","stars":2,"created":"2024-04-21"},{"name":"FireWolfWang/CVE-2023-6019","url":"https://github.com/FireWolfWang/CVE-2023-6019","stars":1,"created":"2024-04-10"}]},"metasploit":[{"name":"Ray cpu_profile command injection","module":"exploit/linux/http/ray_cpu_profile_cmd_injection_cve_2023_6019","type":"exploit","disclosureDate":"2023-11-15","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ray_cpu_profile_cmd_injection_cve_2023_6019.rb"}],"first":{"date":"2023-11-15","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ray_cpu_profile_cmd_injection_cve_2023_6019.rb"},"provenance":"source"},"exploitRefs":[],"flow":[{"stage":"exploitation","techniques":["T1190"],"provenance":"ai"},{"stage":"primary","techniques":["T1059"],"provenance":"ai"}],"timeline":[{"date":"2023-11-15","kind":"exploit-public","label":"First public exploit: Metasploit; later: PoC-in-GitHub 2024-04-10, Exploit-DB 2024-04-12","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ray_cpu_profile_cmd_injection_cve_2023_6019.rb","provenance":"source"},{"date":"2023-11-16","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2023-6019","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Metasploit","daysToKev":null},"priority":{"score":35.6,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.9,"detail":"percentile 0.9950"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":5.0,"detail":"1 Exploit-DB entry; 3 PoC-in-GitHub repos; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":6.86,"detail":"base score 9.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}