AI developer toolsBriefPublic record
ShadowRay 2.0, Ray clusters turned into a botnet (CVE-2023-48022)
The unauthenticated Ray Jobs API was used to build a self-propagating GPU cryptomining botnet (Oligo).
- Disclosed
Live scores
Live scores
CVE-2023-48022- EPSS
- 0.839
very likely to be attacked soon - VEDAS
- 0.987
strong exploit evidence - On CISA KEV
- Not listed
Sources
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.