Search
Find merged stories by title or summary.
CISA Warns of Ray-Project Ray Code Injection Vulnerability Exploited in Attacks
CISA has added a critical Ray-Project Ray vulnerability, tracked as CVE-2025-62593 , to its Known Exploited Vulnerabilities catalog after confirming exploitation in the wild. The flaw can allow remote code execution on systems where vulnerable Ray development environments are running. Ray is an open-source distributed computing framework widely used by Python developers and AI teams for scaling machine learning, data processing, and application workloads. The issue affects Ray versions before 2. 52. 0 and is especially dangerous for developers using Firefox or Safari. At the same time, Ray is active on their local workstation or development server. The Ray Project addressed the vulnerability in version 2. 52. 0. CVE-2025-62593 stems from insufficient protections for Ray HTTP API endpoints, including job-related endpoints that can accept requests that can launch code.
CISA Flags Ray AI Vulnerability CVE-2025-62593 for Active Exploitation
The U. S. Cybersecurity and Infrastructure Security Agency (CISA) has officially added the critical ray ai vulnerability cve-2025-62593 to its Known Exploited Vulnerabilities (KEV) catalog. This inclusion signals that threat actors are actively weaponizing the flaw in the wild, prompting an urgent mandate for Federal Civilian Executive Branch (FCEB) agencies to apply patches by August 20, ... Read more The post CISA Flags Ray AI Vulnerability CVE-2025-62593 for Active Exploitation appeared first on Cyber Updates 365 .
CISA Warns of Critical Ray RCE Flaw Exploited in Active Attacks
The U. S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical remote code execution vulnerability in Ray, the open-source distributed computing framework, to its Known Exploited Vulnerabilities (KEV) Catalog after confirming exploitation in the wild. Tracked as CVE-2025-62593, the flaw affects Ray versions prior to 2. 52. 0 and carries a CVSS 4. 0 score of 9. 4. CISA added the issue to the KEV catalog on August 17, 2026, requiring U. S. federal civilian agencies to remediate it by August 20. The agency’s listing states that the vulnerability could allow remote code execution and specifically warns that developers using Ray as a development tool may be exposed when using Firefox or Safari. Critical Ray RCE Flaw Exploited The vulnerability is rooted in Ray’s handling of HTTP API endpoints, including /api/jobs and /api/job_agent/jobs/ .
U.S. CISA adds a Ray-Project Ray flaw to its Known Exploited Vulnerabilities catalog
U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Ray-Project Ray vulnerability to its Known Exploited Vulnerabilities catalog. The U. S. Cybersecurity and Infrastructure Security Agency (CISA) added a Progress LoadMaster vulnerability, tracked as CVE-2025-62593 (CVSS score of 9. 4), to its Known Exploited Vulnerabilities (KEV) catalog . CVE-2025-62593 is a critical remote code execution (RCE) vulnerability in Ray, an AI compute engine. Versions before 2. 52. 0 insufficiently protected the Ray dashboard/API against browser-based attacks. Its defense relied on checking whether the HTTP User-Agent header started with “Mozilla”, but browsers can modify this header.
CVE-2025-62593 - Ray-Project Ray Code Injection Vulnerability
Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Developers using Ray as a development tool may be exposed to this vulnerability exploitable through Firefox and Safari.
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. • CVE-2025-62593 Ray-Project Ray Code Injection Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies.
You've reached the end of current stories for this search.