The **CISA** recently issued an alert regarding **CVE-2025-62593**, a high-severity vulnerability (CVSS score: 9.4) impacting **Ray**, an open-source, Python-native framework designed for AI and machine learning workloads. The agency's addition of this flaw to its **KEV** catalog signifies confirmed active exploitation. ### The Nature of the Flaw **CVE-2025-62593** enables remote code execution through web browsers like **Mozilla Firefox** and **Apple Safari** via a sophisticated DNS rebinding attack. According to an advisory from **Ray** maintainers, the root cause lies in the long-standing absence of authentication on critical endpoints such as `/api/jobs` and `/api/job_agent/jobs/`. This oversight, combined with insufficient controls against browser-based attacks, particularly those manipulating the User-Agent header, creates a severe attack vector. A malicious website or advertisement can trigger the vulnerability if visited by a developer running **Ray** in a development or testing environment. ### Attack Vectors and Impact Exploitation of **CVE-2025-62593** can lead to arbitrary shell code execution on a victim's machine. Furthermore, the attack can be extended to target network-adjacent **Ray** instances within a private corporate network by leveraging the compromised browser as a 'confused deputy' intermediary. ### Patches and Real-World Exploitation **Ray** maintainers have addressed this issue in version 2.52.0 of the Python package. Credit for discovering the fetch bypass goes to Oligo security researcher **Avi Lumelsky**, with **Jonathan Leitschuh** recognized for identifying the DNS rebinding attack. While **CISA** has not released specific details on the ongoing exploitation, a March 2026 report by **BitSight** revealed that the **RondoDox DDoS** botnet incorporated this vulnerability into its arsenal shortly before its public disclosure. This was facilitated by the availability of a proof-of-concept (PoC) exploit. Additionally, unpatched **Ray** instances have been targeted in campaigns like "**ShadowRay 2.0**," which aim to transform infected clusters with **NVIDIA GPUs** into self-replicreplicating cryptocurrency mining botnets. ### Urgent Call to Action Given the active exploitation, **Federal Civilian Executive Branch (FCEB)** agencies are mandated to apply the necessary fixes and mitigations for **CVE-2025-62593** by August 20, 2026. All organizations and individual users leveraging **Ray** are strongly urged to update to version 2.52.0 or newer immediately to mitigate the risk.