[HIGH PRIORITY] Ray Project Code Injection RCE (CVE-2025-62593)

⚠ HIGH PRIORITY — CISA KEV (Aug 2026). CVE-2025-62593 is a code-injection flaw in Ray-Project Ray (Python distributed computing framework). Attackers exploit browser-based DNS-rebinding against developer Ray dashboards to run arbitrary code on Linux ML training hosts — linked to ShadowRay 2.0 campaigns.

Affected Ray

• Ray versions before 2.52.0
• Ray clusters with dashboard bound to 0.0.0.0 on port 8265
• GPU/ML dev servers on Linux (Ubuntu, RHEL) running Ray for training jobs

Check version

pip show ray | grep Version
ray --version
ss -tlnp | grep 8265
curl -s http://127.0.0.1:8265/ | head -5

Patching Method

1. Upgrade Ray: pip install 'ray>=2.52.0' in every virtualenv and container image.
2. Rebuild Docker images pinning ray==2.52.0 or later in requirements.
3. Restart Ray head and worker nodes after upgrade.
4. Bind dashboard to localhost only: ray start --dashboard-host=127.0.0.1.
5. Firewall port 8265 — never expose Ray dashboard to internet.
6. Audit ~/.ray and job logs for unauthorized job submissions.
7. Rotate cloud API keys stored in Ray job environment variables.

pip install 'ray>=2.52.0' --upgrade
ray stop && ray start --head --dashboard-host=127.0.0.1

Until patched

• Stop Ray cluster if dashboard is internet-accessible
• Use SSH tunnel for dashboard access instead of public binding
• Segment ML dev VLAN from production networks

CVSS: Critical. CISA deadline: 20 Aug 2026 for federal agencies.