Vulnpedia
← All CVEs

CVE-2025-62593

CRITICAL 9.4 KNOWN EXPLOITED PoC CATALOGUED DETECTION TEMPLATE ALL-YEARS

Published 2025-11-26 · Last modified 2026-10-01 · GitHub_M · NVD: Analyzed

Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient guard against browser-based attacks, as the current defense uses the User-Agent header starting with the string "Mozilla" as a defense mechanism. This defense is insufficient as the fetch specification allows the User-Agent header to be modified. Combined with a DNS rebinding attack against the browser, and this vulnerability is exploitable against a developer running Ray who inadvertently visits a malicious website, or is served a malicious advertisement (malvertising). This issue has been patched in version 2.52.0.

ACTIVELY EXPLOITED

Confirmed exploited in the wild — in CISA KEV since 2026-08-17. Patch or mitigate now.

Exploitation likelihood

62.5%chance of exploitation in 30 days · 99th percentile

● In CISA KEV (2026-08-17)● Catalogued PoC◆ SSVC: exploitation active, automatable yes

Impact if exploited

9.4CVSS 4.0 · CRITICAL · CNA

  • ConfidentialityHigh
  • IntegrityHigh
  • AvailabilityHigh

What an attacker needs

  • ✓Access: Reachable over the network — no local access needed
  • ✓Privileges: No account or privileges required
  • ⚠User interaction: Succeeds with passive user activity
  • ✓Complexity: No special conditions — reliably repeatable
  • ✓Requirements: No special attack requirements

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept

Public PoC or exploit resources are catalogued below.

Listed by the named source; Vulnpedia has not tested these resources.

PoC data: JSON

Detection templates

Detection checks are listed separately from PoCs.

Resource commands

nuclei -id CVE-2025-62593 -u https://TARGETDetection template — review its checks and affected versions before use.
curl -s https://vulnpedia.com/cve/CVE-2025-62593/poc.jsonMachine-readable PoC index for this CVE (for automation).

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Data snapshot:

Affected

Vendors Ray Project Anyscale

Products Ray

Weakness (CWE)

  • CWE-94: : Improper Control of Generation of Code ('Code Injection')
  • CWE-352: : Cross-Site Request Forgery (CSRF)

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

References and research data (JSON)

Packages and version ranges

Each advisory describes its own package and affected ranges. A boundary applies to that range; it is not a universal upgrade recommendation.

  • ray PyPI

    pkg:pypi/ray

    ECOSYSTEM range
    • All earlier versions (introduced 0)
    • Fixed boundary (excluded): 2.52.0
    121 explicitly listed affected versions

    0.1.1, 0.1.2, 0.2.0, 0.2.1, 0.2.2, 0.3.0, 0.3.1, 0.4.0, 0.5.0, 0.5.2, 0.5.3, 0.6.0, 0.6.1, 0.6.2, 0.6.3, 0.6.4, 0.6.5, 0.6.6, 0.7.0, 0.7.1, 0.7.2, 0.7.3, 0.7.4, 0.7.5, 0.7.6, 0.7.7, 0.8.0, 0.8.1, 0.8.2, 0.8.3, 0.8.4, 0.8.5, 0.8.6, 0.8.7, 1.0.0, 1.0.1, 1.1.0, 1.10.0, 1.11.0, 1.11.1, 1.12.0, 1.12.1, 1.13.0, 1.2.0, 1.3.0, 1.4.0, 1.4.1, 1.5.0, 1.5.1, 1.5.2, 1.6.0, 1.7.0, 1.7.1, 1.8.0, 1.9.0, 1.9.1, 1.9.2, 2.0.0, 2.0.1, 2.1.0, 2.10.0, 2.11.0, 2.12.0, 2.2.0, 2.20.0, 2.21.0, 2.22.0, 2.23.0, 2.24.0, 2.3.0, 2.3.0rc0, 2.3.1, 2.30.0, 2.31.0, 2.32.0, 2.32.0rc0, 2.33.0, 2.34.0, 2.35.0, 2.36.0, 2.36.1, 2.37.0, 2.38.0, 2.39.0, 2.4.0, 2.40.0, 2.41.0, 2.42.0, 2.42.1, 2.43.0, 2.44.0, 2.44.1, 2.45.0, 2.46.0, 2.47.0, 2.47.1, 2.48.0, 2.49.0, 2.49.1, 2.49.2, 2.5.0, 2.5.1, 2.50.0, 2.50.1, 2.51.0, 2.51.1, 2.51.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.7.0, 2.7.0rc0, 2.7.1, 2.7.2, 2.8.0, 2.8.1, 2.9.0, 2.9.1, 2.9.2, 2.9.3

    Additional upstream package constraints
    {
  "database": {
    "source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/11/GHSA-q279-jhrf-cc6v/GHSA-q279-jhrf-cc6v.json"
  }
}
    GitHub Advisory Database · GHSA-q279-jhrf-cc6v · Updated 2026-09-10T03:50:58.426794053Z
  • ray PyPI

    pkg:pypi/ray

    ECOSYSTEM range
    • All earlier versions (introduced 0)
    • Fixed boundary (excluded): 2.52.0
    121 explicitly listed affected versions

    0.1.1, 0.1.2, 0.2.0, 0.2.1, 0.2.2, 0.3.0, 0.3.1, 0.4.0, 0.5.0, 0.5.2, 0.5.3, 0.6.0, 0.6.1, 0.6.2, 0.6.3, 0.6.4, 0.6.5, 0.6.6, 0.7.0, 0.7.1, 0.7.2, 0.7.3, 0.7.4, 0.7.5, 0.7.6, 0.7.7, 0.8.0, 0.8.1, 0.8.2, 0.8.3, 0.8.4, 0.8.5, 0.8.6, 0.8.7, 1.0.0, 1.0.1, 1.1.0, 1.10.0, 1.11.0, 1.11.1, 1.12.0, 1.12.1, 1.13.0, 1.2.0, 1.3.0, 1.4.0, 1.4.1, 1.5.0, 1.5.1, 1.5.2, 1.6.0, 1.7.0, 1.7.1, 1.8.0, 1.9.0, 1.9.1, 1.9.2, 2.0.0, 2.0.1, 2.1.0, 2.10.0, 2.11.0, 2.12.0, 2.2.0, 2.20.0, 2.21.0, 2.22.0, 2.23.0, 2.24.0, 2.3.0, 2.3.0rc0, 2.3.1, 2.30.0, 2.31.0, 2.32.0, 2.32.0rc0, 2.33.0, 2.34.0, 2.35.0, 2.36.0, 2.36.1, 2.37.0, 2.38.0, 2.39.0, 2.4.0, 2.40.0, 2.41.0, 2.42.0, 2.42.1, 2.43.0, 2.44.0, 2.44.1, 2.45.0, 2.46.0, 2.47.0, 2.47.1, 2.48.0, 2.49.0, 2.49.1, 2.49.2, 2.5.0, 2.5.1, 2.50.0, 2.50.1, 2.51.0, 2.51.1, 2.51.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.7.0, 2.7.0rc0, 2.7.1, 2.7.2, 2.8.0, 2.8.1, 2.9.0, 2.9.1, 2.9.2, 2.9.3

    Additional upstream package constraints
    {
  "database": {
    "source": "https://github.com/pypa/advisory-database/blob/main/vulns/ray/PYSEC-2026-520.yaml"
  }
}
    PyPA · PYSEC-2026-520 · Updated 2026-07-01T20:23:03.643178Z

Vendor product assessments

Showing 32 of 680 vendor product statements; 648 omitted. Read the full vendor advisory.

  • registry.redhat.io/rhaiis/model-opt-cuda-rhel9@sha256:14e32e88f1b89f59ed34a6d712746b82a6a54c6ed4727784f18aeff853abbdc7_arm64 as a component of Red Hat AI Inference Server 3.2 · fixed

    Vendor assessment for this product only.

    pkg:oci/model-opt-cuda-rhel9@sha256%3A14e32e88f1b89f59ed34a6d712746b82a6a54c6ed4727784f18aeff853abbdc7?arch=arm64&repository_url=registry.redhat.io/rhaiis&tag=3.2.2-1764871796

    • vendor fix: For more information visit https://access.redhat.com/errata/RHSA-2025:23080 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:7b04c0154c486aa7dd103ddeaf6bea7b9851859c33a4b979a85261a44a7b77f2_amd64 as a component of Red Hat AI Inference Server 3.2 · fixed

    Vendor assessment for this product only.

    pkg:oci/vllm-cuda-rhel9@sha256%3A7b04c0154c486aa7dd103ddeaf6bea7b9851859c33a4b979a85261a44a7b77f2?arch=amd64&repository_url=registry.redhat.io/rhaiis&tag=3.2.5-1765552580

    • vendor fix: For more information visit https://access.redhat.com/errata/RHSA-2025:23204 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:ec961e5acfde5c1ad0a7e0e2c86a0bf56b9bc46357fa124f9db6dff1006076ab_arm64 as a component of Red Hat AI Inference Server 3.2 · fixed

    Vendor assessment for this product only.

    pkg:oci/vllm-cuda-rhel9@sha256%3Aec961e5acfde5c1ad0a7e0e2c86a0bf56b9bc46357fa124f9db6dff1006076ab?arch=arm64&repository_url=registry.redhat.io/rhaiis&tag=3.2.2-1765379088

    • vendor fix: For more information visit https://access.redhat.com/errata/RHSA-2025:23078 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:53007894763e03f609c35c727cb738db3c2130b19fa0e1069c24240e0870fb7a_amd64 as a component of Red Hat AI Inference Server 3.2 · fixed

    Vendor assessment for this product only.

    pkg:oci/vllm-rocm-rhel9@sha256%3A53007894763e03f609c35c727cb738db3c2130b19fa0e1069c24240e0870fb7a?arch=amd64&repository_url=registry.redhat.io/rhaiis&tag=1772160625

    • vendor fix: For more information visit https://access.redhat.com/errata/RHSA-2026:3462 Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhoai/odh-kserve-agent-rhel9@sha256:7caa5349317343219fa6a504ff80b04904df78adbc60b34a3b1951e072db513a_amd64 as a component of Red Hat OpenShift AI 2.25 · fixed

    Vendor assessment for this product only.

    pkg:oci/odh-kserve-agent-rhel9@sha256%3A7caa5349317343219fa6a504ff80b04904df78adbc60b34a3b1951e072db513a?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=v2.25.1-1765613316

    • vendor fix: For Red Hat OpenShift AI 2.25.1 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhoai/odh-kserve-controller-rhel9@sha256:4bbfad1a5fde624a13c3edd27962e5b8bf7782ea4cd5f64b3a996d308e3be365_ppc64le as a component of Red Hat OpenShift AI 2.25 · fixed

    Vendor assessment for this product only.

    pkg:oci/odh-kserve-controller-rhel9@sha256%3A4bbfad1a5fde624a13c3edd27962e5b8bf7782ea4cd5f64b3a996d308e3be365?arch=ppc64le&repository_url=registry.redhat.io/rhoai&tag=v2.25.1-1765613316

    • vendor fix: For Red Hat OpenShift AI 2.25.1 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhoai/odh-kserve-router-rhel9@sha256:605f8418c5c32d9a0936b4563a79fca6eeaef3bba7ca1b6abb91b0b1e84e4dd3_ppc64le as a component of Red Hat OpenShift AI 2.25 · fixed

    Vendor assessment for this product only.

    pkg:oci/odh-kserve-router-rhel9@sha256%3A605f8418c5c32d9a0936b4563a79fca6eeaef3bba7ca1b6abb91b0b1e84e4dd3?arch=ppc64le&repository_url=registry.redhat.io/rhoai&tag=v2.25.1-1765613316

    • vendor fix: For Red Hat OpenShift AI 2.25.1 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhoai/odh-kserve-router-rhel9@sha256:bdb164d90a0ad4cf3640afb518371e7b91c7682cc0b1e98e025ca1d64b927efc_amd64 as a component of Red Hat OpenShift AI 2.25 · fixed

    Vendor assessment for this product only.

    pkg:oci/odh-kserve-router-rhel9@sha256%3Abdb164d90a0ad4cf3640afb518371e7b91c7682cc0b1e98e025ca1d64b927efc?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=v2.25.1-1765613316

    • vendor fix: For Red Hat OpenShift AI 2.25.1 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9@sha256:e9a1cdebc0511256b293f04741e81461d8113ef4cc891a9d85683aa862baaf7a_arm64 as a component of Red Hat OpenShift AI 2.25 · fixed

    Vendor assessment for this product only.

    pkg:oci/odh-kserve-storage-initializer-rhel9@sha256%3Ae9a1cdebc0511256b293f04741e81461d8113ef4cc891a9d85683aa862baaf7a?arch=arm64&repository_url=registry.redhat.io/rhoai&tag=v2.25.1-1765326513

    • vendor fix: For Red Hat OpenShift AI 2.25.1 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:bc6f025d5db7f46f592ddead36eb978205aa0127c5872ff820850e4fdbef7a76_ppc64le as a component of Red Hat OpenShift AI 3.2 · fixed

    Vendor assessment for this product only.

    pkg:oci/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256%3Abc6f025d5db7f46f592ddead36eb978205aa0127c5872ff820850e4fdbef7a76?arch=ppc64le&repository_url=registry.redhat.io/rhoai&tag=1768223146

    • vendor fix: For Red Hat OpenShift AI 3.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9@sha256:116c00cfc715a100815554b18128f29b61ded103d4612a8bf222c664114c06bc_amd64 as a component of Red Hat OpenShift AI 3.2 · fixed

    Vendor assessment for this product only.

    pkg:oci/odh-pipeline-runtime-pytorch-rocm-py312-rhel9@sha256%3A116c00cfc715a100815554b18128f29b61ded103d4612a8bf222c664114c06bc?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1768223412

    • vendor fix: For Red Hat OpenShift AI 3.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256:11b72ab55ad9981d617d7ecc9bccb84be66e777f2e248ede01f774c90d00f6da_arm64 as a component of Red Hat OpenShift AI 3.2 · fixed

    Vendor assessment for this product only.

    pkg:oci/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256%3A11b72ab55ad9981d617d7ecc9bccb84be66e777f2e248ede01f774c90d00f6da?arch=arm64&repository_url=registry.redhat.io/rhoai&tag=1768306110

    • vendor fix: For Red Hat OpenShift AI 3.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256:a0ad080290361108300fbacfb5709b81c4253fe638fa6ca7af0a9383056aa7f7_amd64 as a component of Red Hat OpenShift AI 3.2 · fixed

    Vendor assessment for this product only.

    pkg:oci/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256%3Aa0ad080290361108300fbacfb5709b81c4253fe638fa6ca7af0a9383056aa7f7?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1768306110

    • vendor fix: For Red Hat OpenShift AI 3.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9@sha256:a73fb5448052d4e27b9cd8268f9405ad13dfd267acde13d6c1f3a920bb7cc432_arm64 as a component of Red Hat OpenShift AI 3.2 · fixed

    Vendor assessment for this product only.

    pkg:oci/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9@sha256%3Aa73fb5448052d4e27b9cd8268f9405ad13dfd267acde13d6c1f3a920bb7cc432?arch=arm64&repository_url=registry.redhat.io/rhoai&tag=1768224395

    • vendor fix: For Red Hat OpenShift AI 3.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9@sha256:a53a80f4e2be8919e59e938002ed5776270f2ec10d841c38d30e778d17f15500_s390x as a component of Red Hat OpenShift AI 3.2 · fixed

    Vendor assessment for this product only.

    pkg:oci/odh-workbench-jupyter-trustyai-cpu-py312-rhel9@sha256%3Aa53a80f4e2be8919e59e938002ed5776270f2ec10d841c38d30e778d17f15500?arch=s390x&repository_url=registry.redhat.io/rhoai&tag=1768253628

    • vendor fix: For Red Hat OpenShift AI 3.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhoai/odh-vllm-gaudi-rhel9@sha256:30dd95f0c900b81b80e435796d82dd556814dd6d46c6b43b7dd879bcfdb8420e_amd64 as a component of Red Hat OpenShift AI 3.3 · fixed

    Vendor assessment for this product only.

    pkg:oci/odh-vllm-gaudi-rhel9@sha256%3A30dd95f0c900b81b80e435796d82dd556814dd6d46c6b43b7dd879bcfdb8420e?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1770956034

    • vendor fix: For Red Hat OpenShift AI 3.3 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • rhoai/odh-vllm-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected

    Vendor assessment for this product only.

    pkg:oci/odh-vllm-cuda-rhel9?repository_url=registry.redhat.io/rhoai/odh-vllm-cuda-rhel9

    • workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
    • none available: Affected
    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:030379c0fb216de4f871c3fb09ab5acc4996f0be1da03fdb1b1726bb60a31554_s390x as a component of Red Hat OpenShift AI 2.25 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-built-in-detector-rhel9@sha256%3A030379c0fb216de4f871c3fb09ab5acc4996f0be1da03fdb1b1726bb60a31554?arch=s390x&repository_url=registry.redhat.io/rhoai&tag=v2.25.1-1764757773

    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:cfb1e6a15c2ac160b7b917c69936b21651f5a39f5f371679f06077ff6079b561_amd64 as a component of Red Hat OpenShift AI 2.25 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-kueue-controller-rhel9@sha256%3Acfb1e6a15c2ac160b7b917c69936b21651f5a39f5f371679f06077ff6079b561?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=v2.25.1-1764809705

    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:028d761574f0d607f3197338f9eacb892bf60edb422d4a843223959cacdb53db_arm64 as a component of Red Hat OpenShift AI 2.25 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-model-registry-job-async-upload-rhel9@sha256%3A028d761574f0d607f3197338f9eacb892bf60edb422d4a843223959cacdb53db?arch=arm64&repository_url=registry.redhat.io/rhoai&tag=v2.25.1-1764839042

    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhoai/odh-rhel9-operator@sha256:7adb580c0020d44dc65093d4087c5bfbd21a400c87da05f5a5dc3a586046b52f_arm64 as a component of Red Hat OpenShift AI 2.25 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-rhel9-operator@sha256%3A7adb580c0020d44dc65093d4087c5bfbd21a400c87da05f5a5dc3a586046b52f?arch=arm64&repository_url=registry.redhat.io/rhoai&tag=v2.25.1-1765803508

    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9@sha256:f79abc8a411d994d0af1ec388d10920ad61c34d4979a71998a8305f4feaf0fd4_amd64 as a component of Red Hat OpenShift AI 2.25 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-workbench-jupyter-minimal-cpu-py312-rhel9@sha256%3Af79abc8a411d994d0af1ec388d10920ad61c34d4979a71998a8305f4feaf0fd4?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=v2.25.1-1764961121

    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:6c42f0be9b0996f7788bb37f21daa37c11769383d3cdbef8062b217e638f0607_arm64 as a component of Red Hat OpenShift AI 3.2 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-kf-notebook-controller-rhel9@sha256%3A6c42f0be9b0996f7788bb37f21daa37c11769383d3cdbef8062b217e638f0607?arch=arm64&repository_url=registry.redhat.io/rhoai&tag=1768409657

    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:9c4a02294c82e0f920485aefe0479342adf93dcadfe3e7a98b172ac2fe8c8043_ppc64le as a component of Red Hat OpenShift AI 3.2 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-ml-pipelines-launcher-rhel9@sha256%3A9c4a02294c82e0f920485aefe0479342adf93dcadfe3e7a98b172ac2fe8c8043?arch=ppc64le&repository_url=registry.redhat.io/rhoai&tag=1768223313

    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:2f6b441d0fe7a1e8f85bb340b7551341b7c4b366cdc1f9f2a6a35e6cf291847e_amd64 as a component of Red Hat OpenShift AI 3.2 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-model-registry-rhel9@sha256%3A2f6b441d0fe7a1e8f85bb340b7551341b7c4b366cdc1f9f2a6a35e6cf291847e?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1768410470

    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:43c0a2920347c76639a7546964b175a119312e89786a44496590e264b6cd9d58_arm64 as a component of Red Hat OpenShift AI 3.2 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256%3A43c0a2920347c76639a7546964b175a119312e89786a44496590e264b6cd9d58?arch=arm64&repository_url=registry.redhat.io/rhoai&tag=1768224425

    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:93660141b12c0d6a9a4bbeacda9053f531c3e739a419e288a2c985747c9ab245_ppc64le as a component of Red Hat OpenShift AI 3.3 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-data-science-pipelines-argo-argoexec-rhel9@sha256%3A93660141b12c0d6a9a4bbeacda9053f531c3e739a419e288a2c985747c9ab245?arch=ppc64le&repository_url=registry.redhat.io/rhoai&tag=1771500865

    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:0e30cd189606d11bf40af1702dfcc7e675cddc1cb3ad6a5820bac0ade18a26fc_arm64 as a component of Red Hat OpenShift AI 3.3 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-kuberay-operator-controller-rhel9@sha256%3A0e30cd189606d11bf40af1702dfcc7e675cddc1cb3ad6a5820bac0ade18a26fc?arch=arm64&repository_url=registry.redhat.io/rhoai&tag=1771433421

    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:4c38feae457c214c8cecd6e951f72795af353f04b49f1f13b916a9239877967e_arm64 as a component of Red Hat OpenShift AI 3.3 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-mod-arch-maas-rhel9@sha256%3A4c38feae457c214c8cecd6e951f72795af353f04b49f1f13b916a9239877967e?arch=arm64&repository_url=registry.redhat.io/rhoai&tag=1771880183

    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:bd10dadf6abf9c98b8c44258ccbbfd488d9daf722501e4381ac4088871db11df_s390x as a component of Red Hat OpenShift AI 3.3 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256%3Abd10dadf6abf9c98b8c44258ccbbfd488d9daf722501e4381ac4088871db11df?arch=s390x&repository_url=registry.redhat.io/rhoai&tag=1771502869

    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • registry.redhat.io/rhoai/odh-trustyai-service-operator-rhel9@sha256:ce76c80916a20d7724824975c56dc7fd6d16e6acafa37a504a879a711cb84001_amd64 as a component of Red Hat OpenShift AI 3.3 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-trustyai-service-operator-rhel9@sha256%3Ace76c80916a20d7724824975c56dc7fd6d16e6acafa37a504a879a711cb84001?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1771365757

    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00
  • rhoai/odh-model-registry-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-model-registry-rhel9?repository_url=registry.redhat.io/rhoai/odh-model-registry-rhel9

    Red Hat · CVE-2025-62593 · Updated 2026-08-31T13:43:09+00:00

Unverified PoC candidates

Catalogue matches for further research. These repositories have not been validated as working exploits.

2 candidates

Additional exploitation reports

Source-specific reports, separate from CISA KEV. Repeated observations from one source are not independent confirmations.

  • VulnCheck KEV · 2026-03-11T00:00:00Z

    Source guidance: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

    Source ransomware assessment: Unknown

    VulnCheck KEV · CVE-2025-62593 · Updated 2026-03-11T00:00:00Z
  • VulnCheck KEV · 2026-03-11T00:00:00ZVulnCheck KEV · CVE-2025-62593
  • VulnCheck KEV · 2026-08-17T00:00:00ZVulnCheck KEV · CVE-2025-62593
  • VulnCheck KEV · 2026-08-18T00:00:00ZVulnCheck KEV · CVE-2025-62593
  • VulnCheck KEV · 2026-08-27T00:00:00ZVulnCheck KEV · CVE-2025-62593
  • VulnCheck KEV · 2026-09-08T00:00:00ZVulnCheck KEV · CVE-2025-62593

Known Affected Software Configurations

VendorProductVersion range
AnyscaleRay< 2.52.0

All CVSS metrics

  • CRITICAL 9.4 v4.0 · CNA Primary
    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
  • CRITICAL 9.4 v4.0 · NVD Secondary
    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  • HIGH 8.8 v3.1 · NVD Primary
    CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

Exploit-tagged references (not proof of a PoC)

Patches & mitigations

Advisories

Technical & other

Sources: NVD · CVE.org · All sources and attribution · EPSS