This vulnerability is a strong reminder that internal or development services should never be considered safe simply because they are not directly exposed to the Internet.

CVE-2025-62593, rated CVSS 9.4, affects Ray and can allow remote code execution through a DNS rebinding attack. What makes the attack particularly interesting is that the victim's own browser can effectively become the bridge between a malicious website and a Ray instance running on the local machine or inside a private network.

CISA has now added the vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, confirming that exploitation is occurring in the wild. Ray addressed the issue in version 2.52.0, and U.S. federal agencies have been directed to apply fixes or mitigations by August 20, 2026.

There is also a larger security lesson here. AI and compute infrastructure is increasingly becoming an attractive target because compromised systems may provide attackers not only network access, but also valuable CPU and GPU resources. Previous attacks against vulnerable Ray environments have already attempted to turn clusters containing NVIDIA GPUs into cryptocurrency-mining botnets.

Security teams therefore need visibility beyond the traditional Internet perimeter. Developer environments, management interfaces, AI infrastructure and supposedly “internal-only” services need the same principles of authentication, segmentation, least privilege and continuous monitoring as production systems.

The browser is no longer merely a client. In attacks like this, it can become an unexpected pathway into the private network.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical flaw impacting Ray to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. Ray is an open-source, Python-native distributed computing framework designed to scale artificial intelligence and machine learning workloads. As of writing, the GitHub project has more than

Source: CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE via The Hacker News — published 18 Aug 2026.