CVE-2023-6019 — A command injection existed in Ray's cpu_profile URL parameter allowing attackers to execute os commands on the system running the ray dashboard remotely without authentication. The issue is fixed — CVE Database · The Intelligence Room