CVE-2023-48022

This repository contains a functional exploit for CVE-2023-48022, a remote command execution vulnerability in the Ray framework's job submission API. The exploit includes both a Python script and a Metasploit module to execute arbitrary commands on vulnerable Ray instances.

This repository contains a functional exploit for CVE-2023-48022, leveraging Ray's job submission API to execute arbitrary commands on a remote Ray cluster. The exploit submits a job that reads a file from the target system, demonstrating remote code execution (RCE).

This Metasploit module exploits an RCE vulnerability in Ray via the agent job submission endpoint, which lacks authentication by default. It submits arbitrary commands through the API to achieve remote code execution.