CISA added CVE-2025-62593 to the Known Exploited Vulnerabilities catalog on 2026-08-17, citing active exploitation of a code injection flaw in Ray-Project's Ray AI compute engine. Per the advisory, the flaw can lead to remote code execution against developers who visit a malicious webpage. Severity ratings differ by source: NVD scores it 8.8 HIGH, while the GitHub Security Advisory assigns 9.4 CRITICAL under CVSS 4.0.
What Is It
Ray is an AI compute engine. Versions prior to 2.52.0 contain an RCE vulnerability arising from an insufficient guard against browser-based attacks. The existing defense checks whether the User-Agent header starts with the string "Mozilla"; a check the advisory describes as bypassable, since the fetch specification allows the User-Agent header to be modified.
Combined with a DNS rebinding attack against the browser, the advisory indicates the flaw can be exploited against a developer running Ray who inadvertently visits a malicious website or is served a malicious advertisement (malvertising). CISA classifies the weaknesses as CWE-94 (code injection) and CWE-352 (cross-site request forgery). NVD scores it 8.8 HIGH (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H); the GitHub Security Advisory assigns a CVSS 4.0 base score of 9.4 CRITICAL. Defenders should note which scale a given tool or ticket is reporting before triaging on the number alone.
Why It Matters
KEV inclusion reflects CISA's determination that the vulnerability has been exploited in the wild. CISA's SSVC assessment rates exploitation as "active" with "total" technical impact, though it is not automatable. Known ransomware campaign use is listed as Unknown.
The attack path appears unusually low-friction: per the NVD CVSS vector, no privileges are required and user interaction is passive; visiting a page or being served an ad may be sufficient. According to the vendor advisory, the technique has been demonstrated through Firefox and Safari; behavior in other browsers is not specified and should not be assumed safe. The targeting profile skews toward developer workstations rather than exposed production infrastructure.
What's Vulnerable
- Vendor/Product: Ray-Project (anyscale) Ray
- Affected versions: all versions prior to 2.52.0
Patch Status
Fixed in Ray 2.52.0. The fix is available in commit 70e7c72.
CISA's required action: apply mitigations in accordance with vendor instructions, ensuring compliance with BOD 26-04 (Prioritizing Security Updates Based on Risk) and CISA's "Forensics Triage Requirements." Follow applicable BOD 26-04 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Stakeholders must evaluate each asset's internet exposure and adhere to BOD 26-04 patching guidelines. Due date: 2026-08-20: three days after KEV addition.