Avi Lumelsky

Security Researcher · Software Architect

Security researcher at Oligo Security, focused on AI infrastructure and open-source software. Previously at Deci AI (acquired by NVIDIA), working on inference acceleration and model architecture optimization across hardware and software stacks. I enjoy runtime challenges on both sides: optimizing ML pipelines for low latency or high throughput, building eBPF-based security tooling, identifying overlooked attack vectors, and finding exploitable bugs in software that most of the industry relies on.

Speaker at Black Hat USA & Asia · DEF CON · BlueHat · CNCF · AppSec Village · BSides · THOTCON · OWASP · AI Summit · PyCon

Research & Work

Feb 2026

Docling Core RCE

Nov 2025

ShadowRay 2.0 - AI Attacks AI: Self-Propagating Botnet Campaign

  • Discovery: Active global campaign exploiting CVE-2023-48022 in Ray to hijack AI compute clusters into a self-replicating botnet - the first documented use of AI infrastructure to autonomously attack other AI infrastructure
  • Scale: 230,000+ Ray servers exposed globally (10× the original ShadowRay discovery); active since at least September 2024
  • Sophistication: DevOps-style delivery via GitLab/GitHub, LLM-generated payloads, CPU throttling at ~60% to avoid detection, processes disguised as kernel workers
  • Blog: ShadowRay 2.0: Attackers Turn AI Against Itself in Global Campaign
  • Coverage: [Forbes] [Dark Reading]
  • Demo: Live RCE demo
2024–2025

ShadowMQ - Systemic RCE Across AI Inference Frameworks

2025

Airborne - Wormable Zero-Click RCE in AirPlay

2025

Pwn My Ride - CarPlay Attack Surface & Jailbreaking

2025

React & Next.js Critical RCE

2025

Anthropic MCP Inspector RCE

2024

Ollama Vulnerabilities

2024

ShadowRay - First Known Attack Campaign on AI Infrastructure

2024

Shining a Light on Shadow Vulnerabilities

  • Foundational research defining the shadow vulnerability class - real, exploitable risks that exist at runtime but are invisible to static analysis and dependency scanners
  • Blog: Shining a Light on Shadow Vulnerabilities (w/ Gal Elbaz)
2024

TensorFlow Keras Downgrade Attack

2023

ShellTorch - PyTorch TorchServe RCE

2024

Building LLM Agents with Minimal Dependencies

2020–2024

Deci AI → NVIDIA

  • Part of the founding team as Deep Learning Software Engineer → Software Architect. Worked on inference acceleration and model architecture optimization across hardware targets — NVIDIA GPUs, mobile (iOS/Android), Jetson, TPUs, CPUs, and browsers
  • Built research pipelines and orchestration infrastructure that enabled research at scale, including the automation layer for Neural Architecture Search (NAS) across any device and hardware stack
  • Deci acquired by NVIDIA in 2024
  • Writing: Infery: Deep Learning Inference in 3 Lines of Python

Writing

Projects & Tools

All projects: github.com/avilum