Critical Unpatched Ray AI Platform Vulnerability Exploited for Cryptocurrency Mining

Researchers report an active campaign dubbed ShadowRay exploiting a critical missing-authentication flaw in the Anyscale Ray distributed compute framework (CVE-2023-48022, CVSS 9.8) since September 2023, allowing attackers to run arbitrary jobs, achieve remote code execution, exfiltrate credentials, poison models, and deploy cryptocurrency miners across hundreds of GPU clusters; Anyscale has released detection tooling and plans to add authentication in a future Ray release but has not issued an immediate fix.