CISA Warns of Ray

Cybersecuritynews •Abinaya • August 18, 2026

CISA has added a critical Ray-Project Ray vulnerability, tracked as CVE-2025-62593, to its Known Exploited Vulnerabilities catalog after confirming exploitation in the wild. The flaw can allow remote code execution on systems where vulnerable Ray development environments are running. Ray is an open-source distributed computing framework widely used by Python developers and AI teams for […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Urges Rapid Fix for Critical Ray RCE Vulnerability CISA has added CVE-2025-62593, a critical remote code execution vulnerability in the Ray framework, to its Known Exploited Vulnerabilities catalog. This flaw, first disclosed in November 2025, allows attackers to exploit vulnerable Ray systems via malicious websites or ads, impacting developers and potentially corporate networks. The vulnerability affects Ray versions prior to 2.52.0 and has been confirmed as actively exploited in the wild. CISA has mandated a three-day remediation window for U.S. federal agencies, significantly shorter than the usual 14 days, due to the urgency of the threat. Ray is widely used by major tech companies, including Amazon and Apple, making the impact potentially extensive. The vulnerability arises from Ray's lack of authentication on critical endpoints, which historically assumed a trusted network environment. The latest version, Ray 2.52.0, introduces optional token-based authentication to mitigate this risk. 8 sources 73

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)

CVE-2025-62593