CVE-2025-62593 Ray-Project Ray
Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient guard against…
- CVSS
- 9.4 Critical
- EPSS
- 60%
- Percentile
- 99
- Published
- 2025-11-26
- Force
- 10 of 12
- Public PoC
- 2
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
On CISA’s exploited list
Ray-Project Ray Code Injection Vulnerability
- Added
- 2026-08-17
- Federal patch deadline
- 2026-08-20
- Ransomware use
- not known