CISA Gives Feds 3 Days to Fix Actively Exploited Ray RCE Bug

CISA gives feds 3 days to fix actively exploited Ray RCE bug

CISA says attackers are exploiting a critical 2025 vulnerability in Ray, the widely used open source framework for scaling Python and machine-learning workloads. Tracked as CVE-2025-62593 and rated 9.4 under CVSS v4, the bug was first disclosed in November 2025. It allows an attacker to use Firefox or Safari to achieve remote code execution (RCE) on a vulnerable Ray system. The open source distributed computing framework is used and supported by…

CISA orders a three-day patch after a flaw in the Ray AI framework comes under active attack

America’s cyber-defence agency has added a single vulnerability in Ray, the open-source framework that powers a large slice of the world’s AI training and inference, to its Known Exploited Vulnerabilities catalogue, confirming that the flaw is being used in real-world attacks. The Cybersecurity and Infrastructure Security Agency made the move on 17 August, giving federal […] This story continues at The Next Web

U.S. CISA adds a Ray-Project Ray flaw to its Known Exploited Vulnerabilities catalog

U.S. CISA adds a Ray-Project Ray flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini August 18, 2026 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Ray-Project Ray vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Progress LoadMaster vulnerability, tracked as CVE-2025-62593 (CVSS score of 9.4), to its Known…

CISA Warns of Active Exploitation of Ray-Project Ray Code Injection Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability to its Known Exploited Vulnerabilities (KEV) catalog. This vulnerability, tracked as CVE-2025-62593, is a code injection flaw in the Ray Project, a widely used open-source distributed computing framework often deployed for artificial intelligence workloads, machine learning development, data processing, and scalable Python […] This article has bee…

CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE

Vulnerability / Network SecurityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) o

CISA Unveils Gold Eagle for AI Vulnerability Reporting

The Gold Eagle capability is designed to identify duplicate reports and support validation. The post CISA Unveils Gold Eagle for AI Vulnerability Reporting first appeared on Executive Gov.