Question 1

What is CVE-2025-62593 — Ray-Project Ray Code Injection Vulnerability?

Accepted Answer

Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Developers using Ray as a development tool may be exposed to this vulnerability exploitable through Firefox and Safari.

Question 2

What is the authoritative source for CVE-2025-62593?

Accepted Answer

Ray-Project Ray Code Injection Vulnerability (CVE-2025-62593) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVSS	8.8 ()
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS	62.46% probability of exploitation · percentile 99.2% · 2026-10-03T12:00:21Z
Last modified	2026-10-01

CVE-2025-62593Ray-Project Ray Code Injection Vulnerability

Description

Scoring

CISA KEV entry