CISA gives feds 3 days to fix actively exploited Ray RCE bug
Phishing, malvertising attacks could target devs to gain access to private corporate networks
CISA says attackers are exploiting a critical 2025 vulnerability in Ray, the widely used open source framework for scaling Python and machine-learning workloads.
Tracked as CVE-2025-62593 and rated 9.4 under CVSS v4, the bug was first disclosed in November 2025. It allows an attacker to use Firefox or Safari to achieve remote code execution (RCE) on a vulnerable Ray system.
The open source distributed computing framework is used and supported by major tech companies, including Amazon, Apple, and OpenAI.
Vulnerable Ray versions try to identify and block browser requests by checking whether the User-Agent header begins with "Mozilla." Firefox and Safari, however, allow scripts using the Fetch API to modify that header.
A developer running Raycould trigger the exploit simply by visiting a dodgy website or receiving a malicious ad in an affected browser. The attacker...
Copyright of this story solely belongs to theregister.com. To see the full text click HERE
