{"id":"ray-browser-code-execution-aug-2026","category":"patch","status":"closed","title":"Ray browser-triggered code execution flaw CVE-2025-62593 exploited; fixed in 2.52.0","tldr":"A malicious page or advert viewed in Firefox or Safari can trigger code execution through vulnerable Ray development systems. CISA confirms exploitation. Developers and IT teams should update Ray to 2.52.0 or later.","summary":"Ray, software used for AI and distributed computing, has a browser-triggered code execution flaw affecting versions before 2.52.0. A developer visiting a malicious page or receiving a malicious advert in Firefox or Safari could expose their development computer or another Ray instance reachable inside a private network. Ray disclosed the flaw in November 2025 and identifies 2.52.0 as the fix. Bitsight documented RondoDox attempts beginning on 24 November 2025, but found those particular attempts ineffective. Separately, CISA confirmed exploitation by adding the flaw to its catalogue on 17 August 2026. The reviewed sources do not identify confirmed victims or losses. As at 3 November, a released fix remains available; ransomware use is unknown.","action":"If you or your business uses Ray, ask the developer or IT team to update it to 2.52.0 or later. Families who do not run Ray have no direct update to install for this flaw.","product":"Ray AI and distributed computing framework","audience":"work","severity":"critical","patch":"patched","exploited":true,"cves":["CVE-2025-62593"],"tags":["ray-project","ray","ai","remote-code-execution","actively-exploited"],"affected":["Ray (pip package ray) versions before 2.52.0"],"fixed":["Ray 2.52.0"],"matches":[],"sources":[{"kind":"advisory","title":"Critical RCE Vulnerability against Ray Devs exploitable via Browser (Safari & Firefox) due to DNS Rebinding Attack","url":"https://github.com/ray-project/ray/security/advisories/GHSA-q279-jhrf-cc6v","by":"Ray Project","date":"2025-11-26"},{"kind":"post","title":"Ray-2.52.0 release","url":"https://github.com/ray-project/ray/releases/tag/ray-2.52.0","by":"Ray Project","date":"2025-11-21"},{"kind":"research","title":"RondoDox Botnet: From Zero to 174 Exploited Vulnerabilities","url":"https://www.bitsight.com/blog/rondodox-botnet-infrastructure-analysis","by":"Bitsight","date":"2026-03-11"},{"kind":"advisory","title":"Known Exploited Vulnerabilities catalogue, 3 November 2026 snapshot","url":"https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json","by":"CISA","date":"2026-11-03"},{"kind":"news","title":"CISA gives feds 3 days to fix actively exploited Ray RCE bug","url":"https://www.theregister.com/security/2026/08/18/cisa-gives-feds-3-days-to-fix-actively-exploited-ray-rce-bug/5289007","by":"The Register","date":"2026-08-18"}],"started":"2026-08-17","closed":"2026-08-17","created":"2026-11-03T22:13:39.554Z","updated":"2026-11-03T22:13:39.554Z","cve_notes":[{"cve":"CVE-2025-62593","name":"Browser-triggered code execution in Ray","what":"Insufficient browser-request protection in Ray's job APIs lets a malicious website viewed in Firefox or Safari run an attacker's code on a Ray system reachable by the browser.","severity":"critical","cvss":9.4}],"timeline":[{"at":"2026-08-17","added":"2026-11-03T22:11:23.504Z","kind":"cisa-added","text":"CISA added CVE-2025-62593 to its Known Exploited Vulnerabilities catalogue, with a federal remediation deadline of 20 August. Whether it was used in ransomware campaigns was marked unknown.","url":"https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json","by":"CISA","patch":null},{"at":"2026-03-11","added":"2026-11-03T22:11:23.504Z","kind":"other","text":"Bitsight published its RondoDox investigation, documenting the November attempts while explaining that they would not successfully exploit this flaw.","url":"https://www.bitsight.com/blog/rondodox-botnet-infrastructure-analysis","by":"Bitsight","patch":null},{"at":"2025-11-26","added":"2026-11-03T22:11:23.504Z","kind":"disclosed","text":"Ray published its advisory, identifying versions before 2.52.0 as affected and the already released 2.52.0 as fixed.","url":"https://github.com/ray-project/ray/security/advisories/GHSA-q279-jhrf-cc6v","by":"Ray Project","patch":"patched"},{"at":"2025-11-24","added":"2026-11-03T22:11:23.504Z","kind":"other","text":"Bitsight first observed RondoDox attempts targeting CVE-2025-62593 on this date. Its later analysis found those attempts were incorrectly implemented and ineffective.","url":"https://www.bitsight.com/blog/rondodox-botnet-infrastructure-analysis","by":"Bitsight","patch":null}],"url":"https://hard.fyi/live/ray-browser-code-execution-aug-2026/","json":"https://hard.fyi/api/live?id=ray-browser-code-execution-aug-2026"}