{"data":{"id":"5555aadc-e8bf-4705-b26d-920a43b3cc89","title":"CVE-2025-62593: Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be…","summary":"CVE-2025-62593 affects Ray, an AI compute engine, before version 2.52.0 when developers run it as a development tool. An attacker can achieve remote code execution from Firefox and Safari by combining a forged User-Agent header, which the fetch specification allows to be modified, with a DNS rebinding attack. Exposure occurs when a developer running Ray visits a malicious website or is served malvertising.","solution":"Fixed in 2.52.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-62593","publishedAt":"2025-11-27T04:15:47.927Z","cveId":"CVE-2025-62593","cweIds":["CWE-94","CWE-352"],"cvssScore":null,"cvssSeverity":null,"severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["ray@< 2.52.0 (fixed: 2.52.0)"],"affectedPackageNames":["ray"],"affectedPackageRefs":["pypi:ray"],"affectedVendors":[],"affectedVendorsRaw":["Ray"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Ray remote code execution via browser-based attacks using DNS rebinding","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"active","epssScore":0.6015,"epssCheckedAt":"2026-11-04T06:10:14.970Z","kevDateAdded":"2026-08-17","advisoryAliases":["GHSA-q279-jhrf-cc6v"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:51:53.931Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-11-21T18:25:07.640Z","daysToFix":-6,"fixCheckedAt":"2026-10-29T21:42:26.870Z","capecIds":["CAPEC-242"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"ray","fixedVersion":"2.52.0","matchedVersion":"2.52.0","fixReleasedAt":"2025-11-21T18:25:07.640Z","daysToFix":-6,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:42:26.721Z"}]}}