Back Feeds.4Sysops

CISA gives federal agencies three days to patch actively exploited Ray RCE

Feeds.4Sysops •IT News • August 18, 2026

CISA has added the critical Ray remote-code-execution flaw CVE-2025-62593 to its Known Exploited Vulnerabilities catalog and given U.S. federal civilian agencies until August 20 to fix it. The unusually short deadline reflects confirmed exploitation of a bug that can let a malicious website or execute code on developer machines and reach Ray services inside corporate networks. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Urges Rapid Fix for Critical Ray RCE Vulnerability CISA has added CVE-2025-62593, a critical remote code execution vulnerability in the Ray framework, to its Known Exploited Vulnerabilities catalog. This flaw, first disclosed in November 2025, allows attackers to exploit vulnerable Ray systems via malicious websites or ads, impacting developers and potentially corporate networks. The vulnerability affects Ray versions prior to 2.52.0 and has been confirmed as actively exploited in the wild. CISA has mandated a three-day remediation window for U.S. federal agencies, significantly shorter than the usual 14 days, due to the urgency of the threat. Ray is widely used by major tech companies, including Amazon and Apple, making the impact potentially extensive. The vulnerability arises from Ray's lack of authentication on critical endpoints, which historically assumed a trusted network environment. The latest version, Ray 2.52.0, introduces optional token-based authentication to mitigate this risk. 8 sources 73

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)

CVE-2025-62593