CISA Flags Ray AI Vulnerability CVE-2025-62593 for Active Exploitation

The critical ray ai vulnerability cve-2025-62593 has been added to the CISA KEV catalog. Learn how DNS rebinding allows RCE and how to patch your Ray clusters.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially added the critical ray ai vulnerability cve-2025-62593 to its Known Exploited Vulnerabilities (KEV) catalog. This inclusion signals that threat actors are actively weaponizing the flaw in the wild, prompting an urgent mandate for Federal Civilian Executive Branch (FCEB) agencies to apply patches by August 20, 2026.

The vulnerability, rated with a critical CVSS score of 9.4, allows attackers to achieve Remote Code Execution (RCE) via web browsers such as Mozilla Firefox and Apple Safari through a sophisticated DNS rebinding attack.

🔗 Read the Full Technical Breakdown and Remediation Steps on CyberUpdates365