CVE-2025-62593 CISA KEV · Actively exploitedSuited to automated attack · CISA
Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack
CVSS score
9.4
EPSS probability
%62.5
Risk score
11.7
Published
10 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
PoC for CVE-2025-62593: unauthenticated RCE in Ray (CISA KEV). Stdlib-only Python. (★1)
Makefile Go / Python
GitHub
CVE-2025-62593 — Ray Unauthenticated RCE Exploit is an unauthenticated remote code execution vulnerability in the Ray distributed AI compute engine. (★0)
Makefile Go / Python
Nuclei: Ray < 2.52.0 - Remote Code Execution
Makefile Go / Python
Similar Vulnerabilities
8.7
CVE-2026-32981Ray Dashboard <= 2.8.0 Path Traversal Leading to Local File Disclosure
Patch status unknownEPSS %1
8.6
CVE-2026-57516Ray < 2.56.0 Unsafe Deserialization RCE via WebDataset Reader
Patch verifiedEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-62593"