CISA Warns of Active Exploitation of Ray

Gbhackers •Divya • August 18, 2026

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability to its Known Exploited Vulnerabilities (KEV) catalog. This vulnerability, tracked as CVE-2025-62593, is a code injection flaw in the Ray Project, a widely used open-source distributed computing framework often deployed for artificial intelligence workloads, machine learning development, data processing, and scalable Python […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Urges Rapid Fix for Critical Ray RCE Vulnerability CISA has added CVE-2025-62593, a critical remote code execution vulnerability in the Ray framework, to its Known Exploited Vulnerabilities catalog. This flaw, first disclosed in November 2025, allows attackers to exploit vulnerable Ray systems via malicious websites or ads, impacting developers and potentially corporate networks. The vulnerability affects Ray versions prior to 2.52.0 and has been confirmed as actively exploited in the wild. CISA has mandated a three-day remediation window for U.S. federal agencies, significantly shorter than the usual 14 days, due to the urgency of the threat. Ray is widely used by major tech companies, including Amazon and Apple, making the impact potentially extensive. The vulnerability arises from Ray's lack of authentication on critical endpoints, which historically assumed a trusted network environment. The latest version, Ray 2.52.0, introduces optional token-based authentication to mitigate this risk. 8 sources 73

Extracted Entities

CISA Warns of Active Exploitation of Ray

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (1)