Is CVE-2025-62593 exploited in the wild?

Yes. CVE-2025-62593 is known to be exploited in the wild, first recorded on 17 August 2026. Treat it as urgent.

How severe is CVE-2025-62593?

Critical severity, with a CVSS score of 8.8, published 26 November 2025.

Which products and versions are affected?

ray (PyPI) ECOSYSTEM:introduced=0,fixed=2.52.0.

Is there a fix for CVE-2025-62593?

Yes. ray (PyPI): upgrade to 2.52.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2025-62593 attacked?

It is attacked over the network.

Am I affected by CVE-2025-62593?

Check whether you run ray (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-62593: PYSEC-2026-520 - Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack

CVE-2025-62593 · Severity: critical · CVSS 8.8 · Exploited in the wild · Published 2025-11-26

Ray is an open-source distributed computing framework used by developers to build scalable applications. A code injection vulnerability in Ray allows attackers to remotely execute arbitrary code on developer machines or Ray-running servers without authentication. This can lead to complete system compromise, data theft, or use of the compromised system for further attacks.

Technologies: ray (PyPI). Vendors: PyPI.

Quick answers

Is CVE-2025-62593 exploited in the wild?: Yes. CVE-2025-62593 is known to be exploited in the wild, first recorded on 17 August 2026. Treat it as urgent.
How severe is CVE-2025-62593?: Critical severity, with a CVSS score of 8.8, published 26 November 2025.
Which products and versions are affected?: ray (PyPI) ECOSYSTEM:introduced=0,fixed=2.52.0.
Is there a fix for CVE-2025-62593?: Yes. ray (PyPI): upgrade to 2.52.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2025-62593 attacked?: It is attacked over the network.
Am I affected by CVE-2025-62593?: Check whether you run ray (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

ray (PyPI): upgrade to 2.52.0 or later
```
pip install "ray>=2.52.0"
```

Technical details

Ray-Project Ray contains a code injection vulnerability in its handling of user input, likely in a web-based interface or API endpoint accessible via browsers. The vulnerability does not require authentication and can be triggered through network requests via Firefox and Safari browsers. An attacker can craft malicious requests containing code payloads that are executed on the target system, achieving remote code execution. The vulnerability has been actively exploited in the wild. Patch availability from the Ray-Project maintainers should be checked at their official security advisory channels.

Affected products

Ray-Project Ray <UNKNOWN>

Identifiers

CVE-2025-62593
GHSA-q279-jhrf-cc6v
PYSEC-2026-520

Timeline

2026-08-17: disclosed
2026-08-17: exploited: Reported exploited in the wild

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.