CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser
CISA added actively exploited Ray flaw CVE-2025-62593 (CVSS 9.4) to its KEV catalog; the DNS rebinding RCE has powered crypto-mining and DDoS botnet campaigns.
CISA added CVE-2025-62593 (CVSS 9.4) to its Known Exploited Vulnerabilities catalog, citing active exploitation of a DNS rebinding-driven RCE flaw in the Ray distributed computing framework, fixed in version 2.52.0. The flaw stems from missing authentication on critical Ray endpoints and an insufficient User-Agent header guard, exploitable against developers running Ray in Firefox or Safari via malicious websites or ads. RondoDox botnet operators incorporated the PoC exploit before the November 26, 2025 disclosure, and unpatched GPU-equipped clusters were hijacked into self-replicating crypto-mining botnets in the ShadowRay 2.0 campaign. FCEB agencies must apply fixes by August 20, 2026.
- Ray maintainers credited Oligo's Avi Lumelsky and Jonathan Leitschuh for the fetch bypass and DNS rebinding chain
- Attack can target network-adjacent Ray instances inside corporate networks using the browser as a confused deputy
- RondoDox added the PoC exploit two days before public disclosure in November 2025
- ShadowRay 2.0 turned unpatched NVIDIA GPU clusters into self-replicating crypto-mining botnets
- CVEs
- CVE-2025-62593
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-62593 | Actively Exploited Browser-Based RCE in Ray AI Compute Engine | 9.4 | 60% | KEVPoC | KEV |
From the original article
2 min read at thehackernews.com
Ravie Lakshmanan Aug 18, 2026 Vulnerability / Network Security The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical flaw impacting Ray to its Known Exploited Vulnerabilities ( KEV ) catalog, citing evidence of active exploitation.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.