Remote Code Execution in Ray via DNS Rebinding and User-Agent Guard Bypass
CVE-2025-62593 is a critical remote code execution vulnerability in Ray, an AI compute engine, affecting versions prior to 2.52.0. The issue impacts developers running Ray as a development tool. Ray attempted to defend critical endpoints from browser-originated access by checking whether the User-Agent header started with the string "Mozilla" and returning an HTTP 405 response in that case. This protection is insufficient because, per the provided advisory context, the Fetch specification allows the User-Agent header to be modified in the relevant attack scenario. An attacker can combine this weakness with a DNS rebinding attack delivered through Firefox or Safari so that a victim developer’s browser, after visiting a malicious website or loading a malicious advertisement, can send requests to the locally reachable Ray service while bypassing the intended browser-based access restriction. Successful exploitation can result in remote code execution against the Ray instance.
Are you exposed to this one?
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
Impact, mitigation & remediation
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
Impact
What an attacker gets, and what they’ve been doing with it.
Mitigation
If you can’t patch tonight, do this now.
Remediation
Patch, then assume compromise.
Exploits
No valid public exploits. Mallory filtered out 3 candidates as fakes, detection scripts, or README-only repos.
All candidate exploits were filtered out by Mallory's validation.
Recent activity
7 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A recently disclosed vulnerability referenced as being incorporated quickly (with PoC) into the RondoDox DDoS botnet’s exploit set; the specific affected product/impact is not described in the provided content.
A vulnerability for which public PoC material appears to have been available before CVE publication, and which RondoDox attempted to exploit even before the CVE was published; however, the observed exploit implementation was likely ineffective due to a User-Agent mistake.
Unknown
A critical remote code execution (RCE) vulnerability in Ray (prior to 2.52.0) exploitable via browser-based attacks (Safari/Firefox) using DNS rebinding and User-Agent header manipulation, potentially triggered when a developer visits a malicious site or malvertising.
The version that knows your environment.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.