Skip to content
OpenAdvisories
Critical · 9.4 Known exploited Scanner template Public exploit CVE-2025-62593 EUVD-2025-199754GHSA-q279-jhrf-cc6vPYSEC-2026-520

Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack

Published Nov 26, 2025 · Updated Oct 1, 2026 · Assigned by GitHub_M

Vendor: ray-project Product: ray Package: airflow-3 Package: ray Ecosystem: PyPI Ecosystem: Wolfi

Description

Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient guard against browser-based attacks, as the current defense uses the User-Agent header starting with the string "Mozilla" as a defense mechanism. This defense is insufficient as the fetch specification allows the User-Agent header to be modified. Combined with a DNS rebinding attack against the browser, and this vulnerability is exploitable against a developer running Ray who inadvertently visits a malicious website, or is served a malicious advertisement (malvertising). This issue has been patched in version 2.52.0.

Affected products

VendorProductAffectedFixed
ray-project ray < 2.52.0 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling airflow-3 3.2.0-r0 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 2 repositories

  • Boreas37/CVE-2025-62593-PoC ★ 2 · Aug 18, 2026

    PoC for CVE-2025-62593: unauthenticated RCE in Ray (CISA KEV). Stdlib-only Python.

  • maxprog-svg/CVE-2026-33017 ★ 0 · Sep 1, 2026

    CVE-2025-62593 — Ray Unauthenticated RCE Exploit is an unauthenticated remote code execution vulnerability in the Ray distributed AI compute engine.

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI ray < 2.52.0 2.52.0 GHSA-q279-jhrf-cc6v

References