The Ray Project’s Ray development tool has a confirmed code injection security flaw. This type of vulnerability could allow unauthorized people to run harmful, unapproved code on systems where the tool is actively used. This issue only impacts developers who use Ray as part of their workflow. The vulnerability can be exploited when accessing Ray through the Firefox or Safari web browsers.
Source: CISA Known Exploited Vulnerabilities Catalog — https://nvd.nist.gov/vuln/detail/CVE-2025-62593
