PT-2025-48198 · Anyscale · Ray

CVE-2025-62593 · Published 2025-11-14 · Updated 2026-06-29

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Ray versions prior to 2.52.0

Description Ray, an AI compute engine, is affected by a critical Remote Code Execution (RCE) issue. The problem stems from insufficient protection against browser-based attacks. The current defense relies on the User-Agent header, specifically checking for the string "Mozilla," but the fetch specification allows modification of this header. This, combined with a DNS rebinding attack, allows an attacker to execute arbitrary code through the browsers Firefox and Safari. A developer running Ray could be exploited by visiting a malicious website or being served a malicious advertisement (malvertising). Approximately 2,100 vulnerable instances have been identified. The issue is exploitable against developers using Ray as a development tool. The vulnerability is triggered through a DNS rebinding attack.

Recommendations Update to Ray version 2.52.0 or later.

Exploit

Fix

RCE

CSRF

Code Injection

Weakness Enumeration

CWE-352

CWE-94

Related Identifiers

BDU:2025-14769

CVE-2025-62593

GHSA-Q279-JHRF-CC6V

PYSEC-2026-520

Affected Products

Ray

References · 32

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/62xxx/CVE-2025-62593.json · Exploit
• https://osv.dev/vulnerability/PYSEC-2026-520 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-62593 · Security Note
• https://osv.dev/vulnerability/CVE-2025-62593 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-q279-jhrf-cc6v · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14769 · Security Note
• https://github.com/ray-project/ray/commit/70e7c72780bdec075dba6cad1afe0832772bfe09 · Note
• https://github.com/ray-project/ray · Note
• https://github.com/ray-project/ray/blob/e7889ae542bf0188610bc8b06d274cbf53790cbd/python/ray/dashboard/http_server_head.py#L184-L196 · Note
• https://github.com/ray-project/ray/security/advisories/GHSA-q279-jhrf-cc6v · Note
• https://github.com/ray-project/ray/blob/f39a860436dca3ed5b9dfae84bd867ac10c84dc6/python/ray/dashboard/optional_utils.py#L129-L155 · Note
• https://github.com/nccgroup/singularity/pull/68 · Note
• https://reddit.com/r/VulnMatter/comments/1p8bkku/resumen_diario_de_vulnerabilidades_27112025 · Reddit Post
• https://twitter.com/CVEnew/status/1993814642829713786 · Twitter Post
• https://t.me/CVEtracker/38334 · Telegram Post