THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2025-62593 — Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient guard against browser-based attacks, as the c

[NVD] CVE-2025-62593 — Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient guard against browser-based attacks, as the c

lownvdPublished 2025-11-26

CVE-2025-62593 CVSS: None Published: 2025-11-26T23:15:47.927

Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient guard against browser-based attacks, as the current defense uses the User-Agent header starting with t

MITRE ATT&CK techniques

MalvertisingT1583.008

Indicators of compromise

CVE-2025-62593cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-62593