CVE-2025-62593: Ray-Project Ray Code Injection Vulnerability. Ray-Project

Ray-Project Ray Code Injection Vulnerability. Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Developers using Ray as a development tool may be exposed to this vulnerability exploitable through Firefox and Safari.

• CISA KEV-listed (remediation due 2026-08-20)
• EPSS 62.5% (99.2% percentile)
• CVSS 9.4 critical

Related briefings

• Hackers exploit Ray AI bug to run code on developer laptops 2026-08-17

Browse the CVE database

Read the full analysis on IntelFusions