CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability, CVE-2025-62593, to its Known Exploited Vulnerabilities (KEV) catalog in the Ray distributed computing framework. This vulnerability, stemming from a lack of authentication on key endpoints, allows for remote code execut…