Ray AI compute engine code injection

Vulnerability

Published 2026-08-17

Updated 2026-10-27

Verified 2026-10-27

Ray AI compute engine code injection (CVE-2025-62593)

Ray is an AI compute engine. CISA added CVE-2025-62593 to KEV on 17 August 2026. The Ray GitHub advisory describes a code-injection issue in versions before 2.52.0. Patch to 2.52.0.

Do not expose developer Ray services to untrusted networks. The Ray advisory rates it 9.4 Critical under CVSS 4.0 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H).

Correction (27 Oct 2026): the CVSS fields now show the advisory's CVSS 4.0 score and vector; an earlier version paired the 9.4 score with a CVSS 3.1 vector. (source: Ray advisory)

Product

Ray (Anyscale)

Versions

Prior to 2.52.0

CVSS

CVE-2025-62593

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

AVAttack Vector: Network
ACAttack Complexity: Low
ATAttack Requirements: None
PRPrivileges Required: None
UIUser Interaction: Passive
VCVulnerable System Confidentiality: High
VIVulnerable System Integrity: High
VAVulnerable System Availability: High
SCSubsequent System Confidentiality: High
SISubsequent System Integrity: High
SASubsequent System Availability: High

Critical (CVSS 4.0, Ray GitHub advisory)

Exploited in Australia?

unknown

Patch to

2.52.0

Primary: Ray advisory
Vendor: NVD
CVE: CVE-2025-62593
Source: CISA KEV

tech ai