CVE-2025-62593

Name of the Vulnerable Software and Affected Versions Ray versions prior to 2.52.0

Description Ray is an AI compute engine that lacks authentication on critical API endpoints, specifically '/api/jobs' and '/api/job agent/jobs/'. This allows remote code execution (RCE) via a DNS rebinding attack targeting developers using Firefox or Safari browsers. The issue stems from an insufficient defense mechanism that relies on checking if the User-Agent header starts with "Mozilla" to identify and block browser requests. Since the fetch specification allows the User-Agent header to be modified in Firefox and Safari, this check is easily bypassed. An attacker can exploit this by tricking a developer into visiting a malicious website or through malvertising (malicious advertisements). Over 2,100 vulnerable instances have been identified, and the flaw has been actively exploited by threat actors, including the RondoDox DDoS botnet, to perform cryptocurrency mining.

Recommendations Update Ray to version 2.52.0 or higher. Enable the token-based authentication feature introduced in version 2.52.0 to further harden the system.