# CISA reportedly adds actively exploited Ray flaw to KEV catalog

_Tuesday, August 18, 2026 at 2:34 AM EDT · Security, AI · Latest · Tier 1 — Major_

![CISA reportedly adds actively exploited Ray flaw to KEV catalog — Primary](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhW_d5c3hAfK37Zdlctl3fWxMgNXEsGKNJ9Fwf0LvHSV75qdLLYHAnyy7Le8aziJ58ma6YA83clBQQwK0xqG-lmeat7Z9bcTEaV4hmNl_SJL5iAh3r1Q4w8vk4b87pQHiGgorzFqyAYUcGXgkSyXA-0ZN1FTjC6ztxhHceoMJr-Qf-B0giZ1ZEC74B4FKL7/s1700-e365/cisa-ray.jpg)

CISA on Monday added CVE-2025-62593, a critical vulnerability in the Ray distributed-computing framework, to its Known Exploited Vulnerabilities catalog, according to The Hacker News.

The reported flaw can enable remote code execution through Firefox or Safari in a DNS rebinding attack. Ray maintainers said the issue primarily affects development and testing environments and patched it in Ray version 2.52.0. The report says federal civilian agencies are recommended to apply fixes or mitigations by August 20, 2026. CISA did not disclose details of exploitation.

## Sources

- [The Hacker News](https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html)

---
Canonical: https://techandbusiness.org/newswire/T84vi_OO0ySdsHeahPv6iP
Retrieved: 2026-08-18T10:20:22.067Z
Publisher: Tech & Business (techandbusiness.org)