CISA flags exploited Ray flaw that lets a website run code on developer machines

CISA added a critical flaw in Ray, the open-source framework for scaling AI and machine-learning workloads, to its exploited-vulnerabilities catalog and gave federal agencies just three days to fix it. Tracked as CVE-2025-62593 and scored 9.4, the bug stems from Ray leaving key dashboard and job endpoints unauthenticated; its only browser defense checked that the request's user-agent began with Mozilla, which attackers can forge. Combined with a DNS rebinding attack, a malicious website or advertisement viewed while running Ray can execute code on the developer's machine. A DDoS botnet adopted it before public disclosure, and a separate campaign has been turning unpatched Ray clusters with GPUs into cryptocurrency miners.

Check

Upgrade Ray to version 2.52.0 or later, and treat the risk as immediate given the three-day federal deadline and ongoing campaigns against exposed clusters, including developer machines running Ray locally.

Affected

Anyone running Ray before 2.52.0 (CVE-2025-62593); unauthenticated dashboard endpoints plus a browser and DNS rebinding attack let a malicious page run code on the machine, and it is exploited in the wild.

Fix

Patch to 2.52.0, keep Ray dashboards and APIs off untrusted networks and behind authentication, restrict who can reach them, and check GPU clusters for unauthorized cryptomining and other signs of compromise.