ThreatCluster

ShadowRay Exploit Targets Ray AI Framework Vulnerability

First seen 2 Dec 2025, 18:33 UTC • •27

Article Content

1 / 4

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

A new exploit known as ShadowRay has emerged, targeting a vulnerability in the Ray AI Framework. This attack is designed to compromise AI systems and has evolved to utilize AI-generated payloads, significantly enhancing its effectiveness. Security researchers at Oligo Security have confirmed the development of this exploit.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 234d ago How this analysis works

More articles in this cluster (3)

Threat Graph

4 entities, 2 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (2)

Data Breach
Malware

Campaign (1)

ShadowRay Attack

Affected Platform (1)

Ray AI Framework

Relationships

Data Breach targets Ray AI Framework
Malware targets Ray AI Framework

Continue Reading

Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects…

Chinese Actor Compromises US Government Networks via PHP2Shell Exploit A suspected Chinese nation-state actor exploited vulnerabilities in Palo Alto Networks firewalls using a chained PHP2Shell exploit and a Linux kernel privilege escalation flaw. The attack, which began on October 23, targeted 25 servers across the US, Japan, Taiwan, and South Korea, with a focus on US…