{"id":"CVE-2025-62593","title":"Ray is an AI compute engine","summary":"Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient gu…","severity":"critical","cwe":["CWE-94","CWE-352"],"published":"2025-11-26","updated":"2026-08-17","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-62593","references":[{"url":"https://github.com/ray-project/ray/commit/70e7c72780bdec075dba6cad1afe0832772bfe09","label":"security-advisories@github.com"},{"url":"https://github.com/ray-project/ray/security/advisories/GHSA-q279-jhrf-cc6v","label":"security-advisories@github.com"},{"url":"https://www.bitsight.com/blog/rondodox-botnet-infrastructure-analysis","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-62593"},{"url":"https://github.com/nccgroup/singularity/pull/68"},{"url":"https://docs.ray.io/en/releases-2.51.1/ray-security/index.html"},{"url":"https://en.wikipedia.org/wiki/Malvertising"},{"url":"https://github.com/ray-project/ray"},{"url":"https://github.com/ray-project/ray/blob/e7889ae542bf0188610bc8b06d274cbf53790cbd/python/ray/dashboard/http_server_head.py#L184-L196"},{"url":"https://github.com/ray-project/ray/blob/f39a860436dca3ed5b9dfae84bd867ac10c84dc6/python/ray/dashboard/optional_utils.py#L129-L155"}],"tags":["nvd","kev","in-the-wild","exploit-available","osv","pip"],"epss":0.16888,"epssPercentile":0.96968,"kev":true,"kevDateAdded":"2026-08-17","kevDueDate":"2026-08-20","kevRansomware":false,"exploited":true,"ingestedAt":"2026-08-17T14:55:59.138Z","exploits":{"github":2,"githubRepos":["https://github.com/Boreas37/CVE-2025-62593-PoC","https://github.com/maxprog-svg/CVE-2026-33017"],"checkedAt":"2026-09-21T15:27:32.104Z"},"exploitAvailable":true,"aliases":["GHSA-q279-jhrf-cc6v","PYSEC-2026-520"],"ecosystem":"pip","vendor":"ray","product":"ray","affected":["ray < 2.52.0"],"patched":["ray 2.52.0"],"slug":"CVE-2025-62593","body":"## Overview\n\nRay is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient guard against browser-based attacks, as the current defense uses the User-Agent header starting with the string \"Mozilla\" as a defense mechanism. This defense is insufficient as the fetch specification allows the User-Agent header to be modified. Combined with a DNS rebinding attack against the browser, and this vulnerability is exploitable against a developer running Ray who inadvertently visits a malicious website, or is served a malicious advertisement (malvertising). This issue has been patched in version 2.52.0.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Package advisory (CVE-2025-62593)\n\nAffected packages:\n\n- `ray < 2.52.0`\n\nPatched in:\n\n- `ray 2.52.0`\n\nSource: https://osv.dev/vulnerability/GHSA-q279-jhrf-cc6v","depth":"hadal","depthScore":81,"depthScoreParts":{"impact":52.3,"likelihood":3.4,"exploitation":25,"ransomware":0},"changes":[{"seq":201413,"id":"CVE-2025-62593","ts":1789399418454,"field":"severity","old":"none","new":"critical"},{"seq":200148,"id":"CVE-2025-62593","ts":1789396853983,"field":"severity","old":"critical","new":"none"},{"seq":196942,"id":"CVE-2025-62593","ts":1789384265307,"field":"severity","old":"none","new":"critical"},{"seq":195869,"id":"CVE-2025-62593","ts":1789383255787,"field":"severity","old":"critical","new":"none"},{"seq":194797,"id":"CVE-2025-62593","ts":1789380246236,"field":"severity","old":"none","new":"critical"},{"seq":193585,"id":"CVE-2025-62593","ts":1789378112048,"field":"severity","old":"critical","new":"none"},{"seq":192371,"id":"CVE-2025-62593","ts":1789376155453,"field":"severity","old":"none","new":"critical"},{"seq":191159,"id":"CVE-2025-62593","ts":1789372973583,"field":"severity","old":"critical","new":"none"},{"seq":189943,"id":"CVE-2025-62593","ts":1789369073213,"field":"severity","old":"none","new":"critical"},{"seq":188731,"id":"CVE-2025-62593","ts":1789367940443,"field":"severity","old":"critical","new":"none"},{"seq":187513,"id":"CVE-2025-62593","ts":1789364916227,"field":"severity","old":"none","new":"critical"},{"seq":186301,"id":"CVE-2025-62593","ts":1789362882140,"field":"severity","old":"critical","new":"none"},{"seq":185086,"id":"CVE-2025-62593","ts":1789360902689,"field":"severity","old":"none","new":"critical"},{"seq":183874,"id":"CVE-2025-62593","ts":1789357786980,"field":"severity","old":"critical","new":"none"},{"seq":182126,"id":"CVE-2025-62593","ts":1789354041353,"field":"severity","old":"none","new":"critical"},{"seq":180919,"id":"CVE-2025-62593","ts":1789352816997,"field":"severity","old":"critical","new":"none"},{"seq":179712,"id":"CVE-2025-62593","ts":1789349915928,"field":"severity","old":"none","new":"critical"},{"seq":178505,"id":"CVE-2025-62593","ts":1789347655864,"field":"severity","old":"critical","new":"none"},{"seq":177298,"id":"CVE-2025-62593","ts":1789346105093,"field":"severity","old":"none","new":"critical"},{"seq":176091,"id":"CVE-2025-62593","ts":1789342613939,"field":"severity","old":"critical","new":"none"},{"seq":175877,"id":"CVE-2025-62593","ts":1789342217060,"field":"severity","old":"none","new":"critical"},{"seq":175415,"id":"CVE-2025-62593","ts":1789338252539,"field":"severity","old":"critical","new":"none"},{"seq":174210,"id":"CVE-2025-62593","ts":1789334541489,"field":"severity","old":"none","new":"critical"},{"seq":170633,"id":"CVE-2025-62593","ts":1789328237521,"field":"severity","old":"critical","new":"none"},{"seq":169428,"id":"CVE-2025-62593","ts":1789326825057,"field":"severity","old":"none","new":"critical"},{"seq":168223,"id":"CVE-2025-62593","ts":1789323260055,"field":"severity","old":"critical","new":"none"},{"seq":167018,"id":"CVE-2025-62593","ts":1789319300231,"field":"severity","old":"none","new":"critical"},{"seq":165813,"id":"CVE-2025-62593","ts":1789318106294,"field":"severity","old":"critical","new":"none"},{"seq":164608,"id":"CVE-2025-62593","ts":1789315477695,"field":"severity","old":"none","new":"critical"},{"seq":163403,"id":"CVE-2025-62593","ts":1789313140599,"field":"severity","old":"critical","new":"none"},{"seq":162198,"id":"CVE-2025-62593","ts":1789311660073,"field":"severity","old":"none","new":"critical"},{"seq":160993,"id":"CVE-2025-62593","ts":1789308120726,"field":"severity","old":"critical","new":"none"},{"seq":160959,"id":"CVE-2025-62593","ts":1789307895409,"field":"severity","old":"none","new":"critical"},{"seq":158336,"id":"CVE-2025-62593","ts":1789299148037,"field":"severity","old":"critical","new":"none"},{"seq":157300,"id":"CVE-2025-62593","ts":1789296404449,"field":"severity","old":"none","new":"critical"},{"seq":156095,"id":"CVE-2025-62593","ts":1789294257739,"field":"severity","old":"critical","new":"none"},{"seq":154890,"id":"CVE-2025-62593","ts":1789292559247,"field":"severity","old":"none","new":"critical"},{"seq":153685,"id":"CVE-2025-62593","ts":1789289191703,"field":"severity","old":"critical","new":"none"},{"seq":152897,"id":"CVE-2025-62593","ts":1789285080625,"field":"severity","old":"none","new":"critical"},{"seq":152141,"id":"CVE-2025-62593","ts":1789280802136,"field":"severity","old":"critical","new":"none"},{"seq":151102,"id":"CVE-2025-62593","ts":1789277356884,"field":"severity","old":"none","new":"critical"},{"seq":150069,"id":"CVE-2025-62593","ts":1789275786917,"field":"severity","old":"critical","new":"none"},{"seq":149036,"id":"CVE-2025-62593","ts":1789273553653,"field":"severity","old":"none","new":"critical"},{"seq":147831,"id":"CVE-2025-62593","ts":1789270754047,"field":"severity","old":"critical","new":"none"},{"seq":145871,"id":"CVE-2025-62593","ts":1789269136191,"field":"severity","old":"none","new":"critical"},{"seq":144775,"id":"CVE-2025-62593","ts":1789266030432,"field":"severity","old":"critical","new":"none"},{"seq":143679,"id":"CVE-2025-62593","ts":1789262361919,"field":"severity","old":"none","new":"critical"},{"seq":142515,"id":"CVE-2025-62593","ts":1789261089765,"field":"severity","old":"critical","new":"none"},{"seq":141351,"id":"CVE-2025-62593","ts":1789258565438,"field":"severity","old":"none","new":"critical"},{"seq":140153,"id":"CVE-2025-62593","ts":1789256270950,"field":"severity","old":"critical","new":"none"}]}