CISA gives feds 3 days to fix actively exploited Ray RCE bug
- ID
- 15236
- Status
- summarized
- Published
- 18 Aug 2026, 11:26 PM
- Fetched
- 18 Aug 2026, 11:51 PM
- Provider
- The Register
- Category
- technology
- Original URL
- https://www.theregister.com/security/2026/08/18/cisa-gives-feds-3-days-to-fix-actively-exploited-ray-rce-bug/5289007
- Source URL
- https://www.theregister.com/headlines.atom
Summary
- Score
- 8.5
- Created
- 18 Aug 2026, 11:53 PM
- Tags
- Audience
- developersai_ml_learnersai_agent_users
What happened
CISA ordered federal agencies to patch CVE-2025-62593 (CVSS 9.4) in Ray within 3 days instead of the usual 14, due to active exploitation. The RCE flaw lets attackers use Firefox or Safari's Fetch API to bypass Ray's browser-blocking check (which only looks for 'Mozilla' in the User-Agent), then use DNS rebinding to hit a developer's local Ray service—triggerable just by visiting a malicious site or seeing a bad ad. Ray 2.52.0 fixes it; vulnerable versions are any prior release.
Why it matters
If you run Ray locally or in dev/test for ML workloads, you are one browser tab away from RCE on your machine—and from there, attackers can pivot to network-adjacent Ray instances. Upgrade to Ray 2.52.0 immediately and avoid browsing with Firefox or Safari on machines running vulnerable Ray until you do. With 7 million weekly downloads, many AI/ML teams in Malaysia likely have exposed dev environments.
Discussion angle
The attack vector is a developer visiting a normal website—no click needed beyond loading a page with a malicious ad. Discuss how many local ML teams run Ray dev environments without network isolation, and whether your team's developer laptops are effectively a bridge into your training cluster.