CVE-2025-62593 — Security Box Score

CVE · referencelatest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2025-62593CRITICAL

ray-project ray — Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   P   H   H   H    9.4   .0101   60.5   YES

AFFECTED
  Product  Versions    Fixed
  ray      < 2.52.0 –  —

TIMELINE
  Oct 16  Reserved by GitHub_M
  Nov 26  Published (CNA: GitHub_M)
  Aug 17  ADDED TO KEV — CVE-2025-62593 (ray-project ray). Remediation due August 20, 2026.
  Aug 18  EXPLOIT PUBLISHED — CVE-2025-62593 (ray-project ray). Public exploit reference added.

CWE-94, CWE-352 · CNA: GitHub_M · CVSS v4.0 · 4 references · NVD status: Analyzed · KEV due August 20, 2026

Description

Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient guard against browser-based attacks, as the current defense uses the User-Agent header starting with the string "Mozilla" as a defense mechanism. This defense is insufficient as the fetch specification allows the User-Agent header to be modified. Combined with a DNS rebinding attack against the browser, and this vulnerability is exploitable against a developer running Ray who inadvertently visits a malicious website, or is served a malicious advertisement (malvertising). This issue has been patched in version 2.52.0.

Lifecycle

Complete event history — 4 events, chronological
Date	Event	Detail
October 16, 2025	Reserved	Reserved by GitHub_M
November 26, 2025	Published	Published (CNA: GitHub_M)
August 17, 2026	KEV ADDED	ADDED TO KEV — CVE-2025-62593 (ray-project ray). Remediation due August 20, 2026.
August 18, 2026	EXPLOIT PUBLISHED	EXPLOIT PUBLISHED — CVE-2025-62593 (ray-project ray). Public exploit reference added.

Affected

Affected products and packages — 1 row
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
ray-project	ray	—	< 2.52.0	—

Weaknesses

CWE-94 · CWE-352

References (4)

https://github.com/ray-project/ray/commit/70e7c72780bdec075dba6cad1afe0832772bfe09 [Patch]
https://github.com/ray-project/ray/security/advisories/GHSA-q279-jhrf-cc6v [Exploit, Patch, Vendor Advisory]
https://www.bitsight.com/blog/rondodox-botnet-infrastructure-analysis [Third Party Advisory]
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-62593 [US Government Resource]

Authoritative record: CVE-2025-62593 at cve.org

Vendors: ray-project

Weaknesses: CWE-94 · CWE-352

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2025-62593 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.