{"id":"CVE-2025-62593","title":"Ray is an AI compute engine","summary":"Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient gu…","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-94","CWE-352"],"vendor":"anyscale","product":"ray","affected":["ray < 2.52.0"],"patched":["ray 2.52.0"],"published":"2025-11-26","updated":"2026-10-01","sourceUpdated":"2026-10-01T19:17:15.957","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-62593","references":[{"url":"https://github.com/ray-project/ray/commit/70e7c72780bdec075dba6cad1afe0832772bfe09","label":"security-advisories@github.com"},{"url":"https://github.com/ray-project/ray/security/advisories/GHSA-q279-jhrf-cc6v","label":"security-advisories@github.com"},{"url":"https://www.bitsight.com/blog/rondodox-botnet-infrastructure-analysis","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-62593","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-62593"},{"url":"https://github.com/nccgroup/singularity/pull/68"},{"url":"https://docs.ray.io/en/releases-2.51.1/ray-security/index.html"},{"url":"https://en.wikipedia.org/wiki/Malvertising"},{"url":"https://github.com/ray-project/ray"},{"url":"https://github.com/ray-project/ray/blob/e7889ae542bf0188610bc8b06d274cbf53790cbd/python/ray/dashboard/http_server_head.py#L184-L196"},{"url":"https://github.com/ray-project/ray/blob/f39a860436dca3ed5b9dfae84bd867ac10c84dc6/python/ray/dashboard/optional_utils.py#L129-L155"}],"tags":["nvd","kev","in-the-wild","exploit-available","osv","pip","cve.org"],"epss":0.6015,"epssPercentile":0.99131,"kev":true,"kevDateAdded":"2026-08-17","kevDueDate":"2026-08-20","kevRansomware":false,"exploited":true,"exploits":{"github":1,"githubRepos":["https://github.com/maxprog-svg/CVE-2026-33017"],"nuclei":["CVE-2025-62593"],"checkedAt":"2026-10-27T16:48:27.196Z"},"exploitAvailable":true,"aliases":["GHSA-q279-jhrf-cc6v","PYSEC-2026-520"],"ecosystem":"pip","ssvc":{"exploitation":"active","automatable":"yes","technicalImpact":"total","timestamp":"2026-08-18T03:55:34.674806Z"},"scores":{"nvd":8.8,"cna":9.4},"ingestedAt":"2026-08-17T14:55:59.138Z","slug":"CVE-2025-62593","body":"## Overview\n\nRay is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient guard against browser-based attacks, as the current defense uses the User-Agent header starting with the string \"Mozilla\" as a defense mechanism. This defense is insufficient as the fetch specification allows the User-Agent header to be modified. Combined with a DNS rebinding attack against the browser, and this vulnerability is exploitable against a developer running Ray who inadvertently visits a malicious website, or is served a malicious advertisement (malvertising). This issue has been patched in version 2.52.0.\n\n## Affected\n\n- `ray < 2.52.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `ray 2.52.0`\n\n## Package advisory (CVE-2025-62593)\n\nAffected packages:\n\n- `ray < 2.52.0`\n\nPatched in:\n\n- `ray 2.52.0`\n\nSource: https://osv.dev/vulnerability/GHSA-q279-jhrf-cc6v","depth":"abyssal","depthScore":85,"depthScoreParts":{"impact":48.4,"likelihood":12,"exploitation":25,"ransomware":0},"changes":[{"seq":214631,"id":"CVE-2025-62593","ts":1790884775234,"field":"cvss","old":"9.4","new":"8.8"},{"seq":214630,"id":"CVE-2025-62593","ts":1790884775234,"field":"severity","old":"critical","new":"high"},{"seq":214611,"id":"CVE-2025-62593","ts":1790881126072,"field":"cvss","old":null,"new":"9.4"},{"seq":211346,"id":"CVE-2025-62593","ts":1790414491362,"field":"epss","old":"0.2729","new":"0.62459"},{"seq":210710,"id":"CVE-2025-62593","ts":1790325050739,"field":"epss","old":"0.16888","new":"0.2729"},{"seq":201413,"id":"CVE-2025-62593","ts":1789399418454,"field":"severity","old":"none","new":"critical"},{"seq":200148,"id":"CVE-2025-62593","ts":1789396853983,"field":"severity","old":"critical","new":"none"},{"seq":196942,"id":"CVE-2025-62593","ts":1789384265307,"field":"severity","old":"none","new":"critical"},{"seq":195869,"id":"CVE-2025-62593","ts":1789383255787,"field":"severity","old":"critical","new":"none"},{"seq":194797,"id":"CVE-2025-62593","ts":1789380246236,"field":"severity","old":"none","new":"critical"},{"seq":193585,"id":"CVE-2025-62593","ts":1789378112048,"field":"severity","old":"critical","new":"none"},{"seq":192371,"id":"CVE-2025-62593","ts":1789376155453,"field":"severity","old":"none","new":"critical"},{"seq":191159,"id":"CVE-2025-62593","ts":1789372973583,"field":"severity","old":"critical","new":"none"},{"seq":189943,"id":"CVE-2025-62593","ts":1789369073213,"field":"severity","old":"none","new":"critical"},{"seq":188731,"id":"CVE-2025-62593","ts":1789367940443,"field":"severity","old":"critical","new":"none"},{"seq":187513,"id":"CVE-2025-62593","ts":1789364916227,"field":"severity","old":"none","new":"critical"},{"seq":186301,"id":"CVE-2025-62593","ts":1789362882140,"field":"severity","old":"critical","new":"none"},{"seq":185086,"id":"CVE-2025-62593","ts":1789360902689,"field":"severity","old":"none","new":"critical"},{"seq":183874,"id":"CVE-2025-62593","ts":1789357786980,"field":"severity","old":"critical","new":"none"},{"seq":182126,"id":"CVE-2025-62593","ts":1789354041353,"field":"severity","old":"none","new":"critical"},{"seq":180919,"id":"CVE-2025-62593","ts":1789352816997,"field":"severity","old":"critical","new":"none"},{"seq":179712,"id":"CVE-2025-62593","ts":1789349915928,"field":"severity","old":"none","new":"critical"},{"seq":178505,"id":"CVE-2025-62593","ts":1789347655864,"field":"severity","old":"critical","new":"none"},{"seq":177298,"id":"CVE-2025-62593","ts":1789346105093,"field":"severity","old":"none","new":"critical"},{"seq":176091,"id":"CVE-2025-62593","ts":1789342613939,"field":"severity","old":"critical","new":"none"},{"seq":175877,"id":"CVE-2025-62593","ts":1789342217060,"field":"severity","old":"none","new":"critical"},{"seq":175415,"id":"CVE-2025-62593","ts":1789338252539,"field":"severity","old":"critical","new":"none"},{"seq":174210,"id":"CVE-2025-62593","ts":1789334541489,"field":"severity","old":"none","new":"critical"},{"seq":170633,"id":"CVE-2025-62593","ts":1789328237521,"field":"severity","old":"critical","new":"none"},{"seq":169428,"id":"CVE-2025-62593","ts":1789326825057,"field":"severity","old":"none","new":"critical"},{"seq":168223,"id":"CVE-2025-62593","ts":1789323260055,"field":"severity","old":"critical","new":"none"},{"seq":167018,"id":"CVE-2025-62593","ts":1789319300231,"field":"severity","old":"none","new":"critical"},{"seq":165813,"id":"CVE-2025-62593","ts":1789318106294,"field":"severity","old":"critical","new":"none"},{"seq":164608,"id":"CVE-2025-62593","ts":1789315477695,"field":"severity","old":"none","new":"critical"},{"seq":163403,"id":"CVE-2025-62593","ts":1789313140599,"field":"severity","old":"critical","new":"none"},{"seq":162198,"id":"CVE-2025-62593","ts":1789311660073,"field":"severity","old":"none","new":"critical"},{"seq":160993,"id":"CVE-2025-62593","ts":1789308120726,"field":"severity","old":"critical","new":"none"},{"seq":160959,"id":"CVE-2025-62593","ts":1789307895409,"field":"severity","old":"none","new":"critical"},{"seq":158336,"id":"CVE-2025-62593","ts":1789299148037,"field":"severity","old":"critical","new":"none"},{"seq":157300,"id":"CVE-2025-62593","ts":1789296404449,"field":"severity","old":"none","new":"critical"},{"seq":156095,"id":"CVE-2025-62593","ts":1789294257739,"field":"severity","old":"critical","new":"none"},{"seq":154890,"id":"CVE-2025-62593","ts":1789292559247,"field":"severity","old":"none","new":"critical"},{"seq":153685,"id":"CVE-2025-62593","ts":1789289191703,"field":"severity","old":"critical","new":"none"},{"seq":152897,"id":"CVE-2025-62593","ts":1789285080625,"field":"severity","old":"none","new":"critical"},{"seq":152141,"id":"CVE-2025-62593","ts":1789280802136,"field":"severity","old":"critical","new":"none"},{"seq":151102,"id":"CVE-2025-62593","ts":1789277356884,"field":"severity","old":"none","new":"critical"},{"seq":150069,"id":"CVE-2025-62593","ts":1789275786917,"field":"severity","old":"critical","new":"none"},{"seq":149036,"id":"CVE-2025-62593","ts":1789273553653,"field":"severity","old":"none","new":"critical"},{"seq":147831,"id":"CVE-2025-62593","ts":1789270754047,"field":"severity","old":"critical","new":"none"},{"seq":145871,"id":"CVE-2025-62593","ts":1789269136191,"field":"severity","old":"none","new":"critical"}]}