A code injection vulnerability has been found in Ray, a development tool some website teams use to build and test applications. This flaw could let unauthorized attackers run their own harmful code on systems that have Ray installed, which may allow them to take full control of those systems remotely.
The vulnerability can be exploited when Ray is accessed through the Firefox or Safari web browsers. If your development team uses Ray and opens the tool in either of these browsers, your systems may be exposed to this security risk.
Source: CISA Known Exploited Vulnerabilities Catalog — https://nvd.nist.gov/vuln/detail/CVE-2025-62593
