A code injection security flaw has been identified in Ray, a tool commonly used by website and application developers for building and testing projects. This type of vulnerability can allow attackers to run unauthorized, harmful code on any system where Ray is installed.
The flaw can be triggered remotely when users access systems running Ray via the Firefox or Safari web browsers. If you or your team use Ray for development work associated with your hosting account, your systems may be exposed to this risk.
Source: CISA Known Exploited Vulnerabilities Catalog — https://nvd.nist.gov/vuln/detail/CVE-2025-62593
