PT-2025-48198 · Anyscale · Ray

Published 2025-11-14 · Updated 2026-03-11 · CVE-2025-62593

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Ray versions prior to 2.52.0

Description Ray, an AI compute engine, is affected by a critical Remote Code Execution (RCE) issue. The problem stems from insufficient protection against browser-based attacks. The current defense relies on the User-Agent header, specifically checking for the string "Mozilla," but the fetch specification allows modification of this header. This, combined with a DNS rebinding attack, allows an attacker to execute arbitrary code through the browsers Firefox and Safari. A developer running Ray could be exploited by visiting a malicious website or being served a malicious advertisement (malvertising). Approximately 2,100 vulnerable instances have been identified. The issue is exploitable against developers using Ray as a development tool. The vulnerability is triggered through a DNS rebinding attack.

Recommendations Update to Ray version 2.52.0 or later.

Exploit

Fix

RCE

CSRF

Code Injection

Weakness Enumeration

CWE-352

CWE-94

Related Identifiers

BDU:2025-14769

CVE-2025-62593

GHSA-Q279-JHRF-CC6V

Affected Products

Ray

References · 29

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/62xxx/CVE-2025-62593.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-62593 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-62593 · Security Note
• https://osv.dev/vulnerability/GHSA-q279-jhrf-cc6v · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14769 · Security Note
• https://github.com/ray-project/ray · Note
• https://github.com/ray-project/ray/blob/f39a860436dca3ed5b9dfae84bd867ac10c84dc6/python/ray/dashboard/optional_utils.py#L129-L155 · Note
• https://github.com/ray-project/ray/blob/e7889ae542bf0188610bc8b06d274cbf53790cbd/python/ray/dashboard/http_server_head.py#L184-L196 · Note
• https://github.com/ray-project/ray/security/advisories/GHSA-q279-jhrf-cc6v · Note
• https://github.com/ray-project/ray/commit/70e7c72780bdec075dba6cad1afe0832772bfe09 · Note
• https://github.com/nccgroup/singularity/pull/68 · Note
• https://t.me/aptreports/26756 · Telegram Post
• https://twitter.com/Karma_X_Inc/status/1993873414214336616 · Twitter Post
• https://twitter.com/zoomeye_team/status/1993943274541969666 · Twitter Post
• https://en.wikipedia.org/wiki/Malvertising · Note