CVE-2023-48022: RCE in Ray Job Submission API

CVE-2023-48022 is a remote code execution (RCE) vulnerability in Anyscale Ray versions 2.6.3 and 2.8.0 via the job submission API. An unauthenticated remote attacker can execute arbitrary code if Ray is exposed to an uncontrolled network. According to official documentation, Ray is designed exclusively for strictly controlled environments; the vendor states the flaw is not critical when used as intended. However, GitHub signals from October 2026 suggest sustained interest and possible public availability of exploit code.

CVSS 9.8 (Critical) reflects maximum theoretical risk: no authentication required and full system access possible. The flaw was disclosed on November 28, 2023, and has been public for over two years. Mitigation status is mixed: version 2.52.0+ offers user-configurable token authentication, but it is not enabled by default across all versions. Recent GitHub signals indicate exploit or PoC code continues to circulate; no confirmed wild attacks are reported, yet the vulnerability remains relevant for organizations running Ray in unintended open environments.

Defenders must immediately verify whether Ray is installed and accessible from uncontrolled networks. If present, actions are clear: upgrade to 2.52.0 or later and, for intermediate versions, enable token authentication. In parallel, consult Anyscale to confirm whether your use case falls within the intended controlled environments: Ray is a distributed computing tool, not an Internet-facing service. Monitor internal networks for job submission API access; if accidentally exposed, isolate immediately and consider worker reset.