Description
A command injection existed in Ray's cpu_profile URL parameter allowing attackers to execute os commands on the system running the ray dashboard remotely without authentication. The issue is fixed in version 2.8.1+. Ray maintainers' response can be found here: https://www.anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ray-project | ray-project/ray | unspecified – ≤ latest | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
Ray cpu_profile command injection
exploit/linux/http/ray_cpu_profile_cmd_injection_cve_2023_6019
Exploit-DB 1
- Ray OS v2.6.3 - Command Injection RCE(Unauthorized) EDB-51978 · webapps · Apr 12, 2024
GitHub 4 repositories
-
joaquinrrr/CVE-2023-6019 ★ 6 · Jun 19, 2026
PoC exploit for CVE-2023-6019 - Remote Code Execution via unauthenticated Ray Dashboard Jobs API.
-
Clydeston/CVE-2023-6019 ★ 2 · Apr 21, 2024
Python POC for CVE-2023-6019 taken from https://huntr.com/bounties/d0290f3c-b302-4161-89f2-c13bb28b4cfe
-
FireWolfWang/CVE-2023-6019 ★ 1 · Apr 10, 2024
Ray OS Command Injection RCE(Unauthorized)
-
Zohaibkhan1472/cve-2023-6019 ★ 0 · Oct 28, 2025
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | ray | < 2.8.1 | 2.8.1 | GHSA-h3xg-wv58-5p43 |