CRITICAL VULNERABILITY FOUND IN RAY AI FRAMEWORK

Summary from the TLDR InfoSec newsletter

A critical vulnerability in Ray, an open source compute framework for AI, could allow unauthorized access to all nodes. Tracked as CVE-2023-48023, the vulnerability allows remote attackers to submit or delete jobs without authentication. Furthermore, an attacker could retrieve sensitive information and execute arbitrary code.