Case ray-code-injection-cve-2025-62593AI supply chainOct 14, 2026Worldwide

Ray code injection RCE (CVE-2025-62593) actively exploited

CISA says a Ray code injection flaw allowing remote code execution is actively exploited; developers using Ray as a dev tool may be exposed via Firefox and Safari.

HighAttack on AIStatus: OngoingVerified case file

Open in the interactive map Cite this case

Reported: Oct 14, 2026
Location: Worldwide
Target: Ray-Project Ray AI compute framework users
Severity: High
Triggered by: Unknown
Actor type: Unknown
Reported loss: None reported
CVE: CVE-2025-62593

What happened

CISA says a Ray code injection flaw allowing remote code execution is actively exploited; developers using Ray as a dev tool may be exposed via Firefox and Safari.

Impact: Remote code execution on affected Ray development setups.

Who triggered it

Actor: Unknown

Attribution: Not stated in the CISA KEV entry.

Motive: Unknown

How it happened

Attack vector: Code injection reachable through Firefox and Safari against developers running Ray.

Root cause: Code injection vulnerability in Ray.

Timeline

Oct 14, 2026Reported by CISA KEV

Response

Added to CISA's Known Exploited Vulnerabilities catalog.

Current status: Ongoing

Sources (open in a new tab)

CISA KEV cisa.gov

Cite this case

Ray code injection RCE (CVE-2025-62593) actively exploited. AI Threat Watch, case ray-code-injection-cve-2025-62593, Oct 14, 2026. https://aithreat.io/cases/ray-code-injection-cve-2025-62593/

Permanent link: https://aithreat.io/cases/ray-code-injection-cve-2025-62593/