Daily Digest

Public Exploit for Critical Ray AI Framework RCE Puts Thousands of Servers at Risk

Public Exploit for Critical Ray AI Framework RCE Puts Thousands of Servers at Risk

February 22, 2026
1 article (1 new)
10 min read

Summary

This edition covers a critical remote code execution vulnerability (CVE-2023-48022) in the popular Ray AI/ML framework. With a CVSS score of 9.8 and a publicly available proof-of-concept exploit, thousands of internet-exposed Ray servers are now at immediate risk of complete takeover. The vulnerability stems from a lack of authentication in the Ray Dashboard, allowing unauthenticated attackers to execute arbitrary code. Administrators are urged to patch to Ray version 2.7.0 or implement network-level mitigations without delay.

Filter by Category

New Articles (1)

Critical RCE Flaw in Ray AI Framework Actively Exploited After PoC Release

CRITICAL

Public Exploit for Critical Ray RCE Vulnerability (CVE-2023-48022) Threatens Thousands of AI/ML Servers

A critical remote code execution vulnerability, CVE-2023-48022 (CVSS score 9.8), in the open-source Ray AI/ML framework is under active threat following the public release of a proof-of-concept exploit. The flaw, stemming from a lack of authentication in the Ray Dashboard, allows unauthenticated attackers to execute arbitrary code and take full control of vulnerable Ray clusters. Security researchers report thousands of internet-exposed Ray instances are at immediate risk. The vulnerability affects Ray versions 2.6.3 and earlier, and users are urged to upgrade to version 2.7.0 or later immediately.

February 22, 2026
6 min read
RCEAIMLRay FrameworkAuthentication Bypass +2 more
Critical RCE Flaw in Ray AI Framework Actively Exploited After PoC Release
Vulnerability
Threat Intelligence
Patch Management

📢 Share This Publication

Help others stay informed about cybersecurity threats