A security flaw called a code injection vulnerability has been identified in Ray-Project Ray, a tool used for software development. This type of issue could allow an attacker to run their own unauthorized code remotely on a system that is using the tool.
Developers who use Ray as part of their development work may be exposed to this risk. The vulnerability can be exploited when accessing Ray through Firefox or Safari web browsers.
Source: CISA Known Exploited Vulnerabilities Catalog — https://nvd.nist.gov/vuln/detail/CVE-2025-62593
