cve 2025 62593

This tag covers CVE-2025-62593, a critical remote-code-execution vulnerability in the Ray distributed AI framework. CISA added the flaw to its Known Exploited Vulnerabilities catalog after confirming active exploitation. The issue affects Ray installations older than version 2.52.0, and the vulnerable target can be a developer's own machine rather than a traditional internet-facing server. The attack vector involves DNS rebinding. For Windows developers and administrators, the immediate task is to find any Ray installation older than 2.52.0 and update it, especially on workstations where users browse the web. This tag provides essential information for patching and mitigating this actively exploited vulnerability.