module
Ray Agent Job RCE
| Disclosed |
|---|
| Nov 15, 2023 |
Disclosed
Nov 15, 2023
Description
RCE in Ray via the agent job submission endpoint.
This is intended functionality as Ray's main purpose is executing arbitrary workloads.
By default Ray has no authentication.
This is intended functionality as Ray's main purpose is executing arbitrary workloads.
By default Ray has no authentication.
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.