| The flaw (CVE-2025-62593) allows remote code execution and is already under active exploitation. Ray is one of the most widely used open-source systems for scaling AI and machine learning workloads. It is used by major organizations including Amazon, Apple, and OpenAI. Attackers can reach vulnerable instances through ordinary browsers via DNS rebinding. The short remediation window signals that CISA considers the risk unusually high. |
