Ray < 2.52.0 Remote Code Execution (CVE-2025-62593)

The Ray Dashboard service running on the remote host is prior to version 2.52.0. It is, therefore, affected by a remote code execution vulnerability: - Ray's browser-based attack protection relies solely on checking that the User-Agent header starts with 'Mozilla'. The Fetch specification allows...

CVE-2025-62593

creationtimestamp| type| source ---|---|--- 2025-11-26 17:19:39+00:00| published-proof-of-concept| https://github.com/ray-project/ray/security/advisories/GHSA-q279-jhrf-cc6v 2025-11-27 00:02:56+00:00| seen| https://infosec.exchange/users/offseq/statuses/115618727470423566 2025-11-27 00:02:57+00:0...