Ray CVE-2025-62593: Critical Browser-Driven RCE via DNS Rebinding

CVE-2025-62593 is a critical remote code execution vulnerability in the Ray distributed-computing framework where an attacker can use DNS rebinding and a User-Agent bypass to reach the Ray Dashboard Jobs API (commonly on port 8265) and submit malicious jobs that execute with the Ray process privileges, risking theft of code, credentials, datasets, model artifacts, resource abuse, and lateral movement. CISA reported active exploitation; immediate mitigations are to upgrade to Ray ≥2.52.0 (2.52.1 preferred), enable token authentication, restrict access to management interfaces, and hunt for signs of compromise.