CVE-2023-6019 Scanner
CVE-2023-6019 Scanner - Command Injection vulnerability in Ray
url
CVE
CVE-2023-6019
9.8
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
A command injection existed in Ray's cpu_profile URL parameter allowing attackers to execute os commands on the system running the ray dashboard remotely without authentication. The issue is fixed in version 2.8.1+. Ray maintainers' response can be found here: https://www.anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023
Attack Vector
Network
Privileges Req.
None
User Interaction
None
ray-project/ray
Updated Nov 10, 2026View on NVD →
S4E scanner
CVE history: ray-project/ray
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →