CVE-2026-33017

CVE-2025-62593 — استغلال تنفيذ الأوامر عن بُعد غير المصادق عليه في Ray نظرة عامة CVE-2025-62593 هو ثغرة تنفيذ أوامر عن بُعد غير مصادق عليها في محرك الحوسبة الموزعة للذكاء الاصطناعي Ray. السبب الجذري هو غياب المصادقة على نقاط نهاية HTTP الحرجة /api/jobs, /api/jobagent/jobs. يمكن للمهاجم إرسال وظيف...

CVE-2023-48022

CVE-2023-48022 استغلال CVE-2023-48022 معدّل من عمل Bishop Fox طريقة الاستخدام اضبط عنوان IP والمنفذ في jobs.py اضبط الحمولة في malicious.py $ pip install ray $ python3 jobs.py...

ShadowRay-RCE-PoC-CVE-2023-48022

Ray फ्रेमवर्क में रिमोट कमांड निष्पादन भेद्यता के लिए PoC CVE-2023-48022 यह शोषण स्क्रिप्ट और PoC vsociety पर एक गहन CVE विश्लेषण के लिए लिखे गए हैं। Ray फ्रेमवर्क, Python-आधारित AI और मशीन लर्निंग अनुप्रयोगों के लिए एक आवश्यक उपकरण, एक महत्वपूर्ण सुरक्षा चुनौती का सामना कर रहा है। संक्षेप में, R...

Ray < 2.52.0 - Remote Code Execution

Ray versions prior to 2.52.0 allow unauthenticated remote code execution via the job submission API at /api/jobs/. A weak User-Agent heuristic rejecting Mozilla-prefixed headers can be bypassed by non-browser clients, enabling arbitrary command execution when the dashboard is network-reachable. i...

CVE-2026-32773 Apache Spark: XSS Vulnerability in Spark Web 3.5.4

There is a lack of XSS escaping in the Spark History Server prior to 3.5.8 which allows a malicious Spark job to generate arbitrary unescaped frontend code which could lead to a minimal privilege escalation in browser. Users are encouraged to upgrade to Spark 3.5.8 or later. This CVE is marked as...

Exploit for Eval Injection in Langflow

CVE-2025-62593 — Ray Unauthenticated RCE Exploit Overview...

CVE-2026-68437

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fit paired fragment job in the correct CCCB For geometry jobs with a paired fragment job, at the moment, the DRM scheduler's preparejob callback: - checks for internal driver dependencies for the geometry job; -...

CVE-2026-68281

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Count paired job fence as dependency in preparejob The DRM scheduler's preparejob callback counts the remaining non-signaled native dependencies for a job, preventing job submission until those plus job data and...

PraisonAI: Jobs API exposes agent-execution endpoints with no authentication

praisonai: Jobs API exposes agent-execution endpoints with no authenticationResearcher: Kai Aizen — SnailSploit @SnailSploit, Adversarial & Offensive Security Research Target: https://github.com/MervinPraison/PraisonAI---Package: praisonai on PyPIAffected version empirically tested:...

Ray has arbitrary code execution via jobs submission API

Anyscale Ray allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment...

PYSEC-2026-517 Ray has arbitrary code execution via jobs submission API

Anyscale Ray allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment...

PT-2026-53501

In mlflow/mlflow, the FastAPI job endpoints under /ajax-api/3.0/jobs/ are not protected by authentication or authorization when the basic-auth app is enabled. This vulnerability affects the latest version of the repository. If job execution is enabled MLFLOW SERVER ENABLE JOB EXECUTION=true and a...

PT-2026-53587

Anyscale Ray allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment...

Server-side Request Forgery (SSRF)

Overview PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent...

CVE-2026-2652

A vulnerability in mlflow/mlflow versions 3.9.0 and earlier allows unauthenticated access to certain FastAPI routes when the server is started with authentication enabled --app-name basic-auth and served via uvicorn ASGI. The FastAPI permission middleware only enforces authentication on /gateway/...

CVE-2026-2652

MLflow MLflow

SUSE CVE-2026-43446

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix runtime suspend deadlock when there is pending job The runtime suspend callback drains the running job workqueue before suspending the device. If a job is still executing and calls pmruntimeresumeandget, it can...

EUVD-2026-28752

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix runtime suspend deadlock when there is pending job The runtime suspend callback drains the running job workqueue before suspending the device. If a job is still executing and calls pmruntimeresumeandget, it can...

CVE-2026-43446

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix runtime suspend deadlock when there is pending job The runtime suspend callback drains the running job workqueue before suspending the device. If a job is still executing and calls pmruntimeresumeandget, it can...

CVE-2026-43446

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix runtime suspend deadlock when there is pending job The runtime suspend callback drains the running job workqueue before suspending the device. If a job is still executing and calls pmruntimeresumeandget, it can...