{"uuid": "a0f86ede-8c77-4514-b00a-805463e10db2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://t.me/pphm_HackerNews/2683", "content": "\ud83d\udd34 CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical flaw impacting Ray to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.\n\nRay is an open-source, Python-native distributed computing framework designed to scale artificial intelligence and machine learning workloads. As of writing, the GitHub project has more than 43,500 stars and has been forked over 7,900 times.\n\nThe vulnerability in question relates to CVE-2025-62593 (CVSS score: 9.4), which can result in remote code execution via web browsers like Mozilla Firefox and Apple Safari by means of a DNS rebinding attack.", "creation_timestamp": "2026-08-21T23:00:05.734223Z"}