Anyscale Ray LFI via /static/ directory (missing authorization)
Date: 2023-09-05
Affected: ray < 2.8.1
Attack vector: path-traversal
Category: real-world
Severity: Critical
CVE: CVE-2023-48022
CVE-2023-6019
CVE-2023-6020
CVE-2023-6021
CVE-2025-34351
CVE-2026-27482
CVE-2026-32981
CWE: CWE-1188
CWE-22
CWE-29
CWE-304
CWE-396
CWE-78
CWE-829
CWE-862
CWE-918
CVSS: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)

Local file inclusion in Ray's /static/ directory allows attackers to read any file on the server without authentication. Fixed in 2.8.1+.

Impact: Cluster-wide malware propagation; cryptocurrency mining hijack; compute resource theft

Mitigations:
Authentication on job submission APIs
Network segmentation for AI compute clusters
Patch Ray framework promptly

Architectural layers (MAESTRO):