Critical Ray AI Flaw Exposes Devs via Safari & Firefox (CVE-2025-62593)

A critical remote code execution vulnerability (CVE-2025-62593) has been found in the Ray framework, affecting AI and Python developers using Safari and Firefox. This flaw allows attackers to execute arbitrary code on a developer's machine through malicious websites or ads by exploiting how Ray handles local API requests. The vulnerability arises from insufficient authentication on local endpoints and the ability to spoof the User-Agent header in these browsers.

A DNS rebinding attack can trick the browser into treating a remote server as the same origin as the local Ray instance, enabling unauthorized commands to be sent. The Ray project has released a fix in version 2.52.0, which includes a token-based authentication feature to enhance security. Developers are urged to update immediately.