# CISA Highlights Critical Flaw in Ray Framework Amid Active Exploitation

*Published August 19, 2026*
*Source: [https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html](https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html)*

## Executive Summary

CISA has added a critical Ray framework vulnerability to its Known Exploited Vulnerabilities catalog due to active exploitation. This flaw can lead to remote code execution through DNS rebinding attacks, primarily affecting developers using Ray in development environments.

## Article

The Cybersecurity and Infrastructure Security Agency (CISA) has identified a critical vulnerability within the Ray framework and added it to its Known Exploited Vulnerabilities catalog. This decision follows evidence of active exploitation of the flaw known as CVE-2025-62593, which carries a CVSS score of 9.4. Ray, a widely used open-source platform for scaling artificial intelligence and machine learning workloads, is particularly popular among developers, boasting over 43,500 stars on GitHub.

The vulnerability allows remote code execution via web browsers such as Mozilla Firefox and Apple Safari through a DNS rebinding attack. This issue arises from the Ray Development team's historical choice not to implement authentication on critical endpoints. This oversight has led to the exploitation of endpoints like /api/jobs and /api/job_agent/jobs, enabling attackers to execute arbitrary code.

The vulnerability primarily threatens developers using Ray in development or testing environments. If a developer visits a malicious website or encounters a harmful advertisement, attackers can execute arbitrary shell code on their machine. Furthermore, the attack can extend to network-adjacent Ray instances by using the browser as an intermediary. The Ray team has addressed this issue in version 2.52.0 of the Python package, crediting security researchers Avi Lumelsky and Jonathan Leitschuh for discovering the flaws.

While CISA has not detailed specific instances of the vulnerability's exploitation, earlier reports indicate that the RondoDox DDoS botnet incorporated this flaw before it was publicly disclosed. Additionally, unpatched Ray instances have been targeted in campaigns like ShadowRay 2.0, which aims to convert affected clusters into cryptocurrency mining botnets. Federal agencies have been advised to apply necessary patches and mitigations by August 20, 2026, to safeguard against these threats.