CISA Adds Actively Exploited Ray Flaw to KEV Catalog

CISA added CVE-2025-62593, a critical Ray flaw with a 9.4 CVSS score, to its Known Exploited Vulnerabilities catalog after confirming active exploitation. The DNS rebinding attack enables remote code execution via Firefox and Safari. Anyscale fixed the issue in Ray version 2.52.0, with federal agencies required to patch by August 20.