Browser-Triggered Code Injection RCE in Ray Distributed Computing Framework (CVE-2025-62593)
CISA added this flaw to KEV yesterday with a 2026-08-20 remediation deadline, and exploitation reporting ties it to botnet activity, so any team running an unpatched Ray cluster or dashboard is an active target this week.
A code injection flaw in Ray allows remote code execution on machines running Ray, and can be triggered against developers through the Firefox and Safari browsers, meaning even Ray instances bound to non-public interfaces can be reached via a victim's browser. Successful exploitation gives the attacker code execution on the Ray node.
Affected: Ray (ray-project) < 2.52.0
How to Test
Run `ray --version` (or check `pip show ray`) on all nodes; any version below 2.52.0 is vulnerable. Check whether the Ray dashboard (default port 8265) or Ray client ports are listening on non-loopback interfaces with `ss -tlnp | grep 8265`, and review dashboard/API access logs for unexpected job submissions or requests with browser Origin headers.
How to Patch
Upgrade all Ray installations to 2.52.0 or later (`pip install -U 'ray>=2.52.0'`). Until upgraded, bind the Ray dashboard and job-submission API to 127.0.0.1 only, firewall port 8265 and Ray cluster ports from untrusted networks, and avoid browsing untrusted sites from machines running a local Ray instance.