Ray CVE-2025-62593: Browser-Driven RCE Against Ray Devs
Upgrade Ray to 2.52.0 or later on developer machines and internal clusters this week; the attack needs a Firefox or Safari user to load a hostile page while a pre-2.52 dashboard is running, and the public evidence of real-world use is thin.
Must act: Developers and data scientists who run Ray below 2.52.0 locally or on internal clusters and browse with Firefox or Safari, and any team whose Ray dashboard is reachable from employee browsers or the internet.
Can relax: Teams already on Ray 2.52.0 or later (ideally with token authentication on) and machines that never run a local Ray dashboard; Chrome users were not exposed to this specific browser path.
- Find every Ray install (pip show ray, plus images and lockfiles) and upgrade to 2.52.0 or later; 2.59.0 is current.
- Turn on token authentication: set RAY_AUTH_MODE=token before starting clusters (on by default for local clusters from 2.59).
- Make sure no Ray dashboard (port 8265 by default) is reachable from the internet; use SSH tunnels or kubectl port-forward instead.