{"schema":"vulnpedia.research/1","cve":"CVE-2025-62593","references":[{"url":"https://github.com/ray-project/ray/security/advisories/GHSA-q279-jhrf-cc6v","tags":["x_refsource_CONFIRM","Exploit","Patch","Vendor Advisory","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2025-11-26T22:28:28.577Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2025-11-26T22:28:28.577Z","url":"https://github.com/ray-project/ray/security/advisories/GHSA-q279-jhrf-cc6v"},{"source":"nvd","sourceId":"CVE-2025-62593","modified":"2026-10-19T13:10:00.110","url":"https://github.com/ray-project/ray/security/advisories/GHSA-q279-jhrf-cc6v"},{"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","url":"https://github.com/ray-project/ray/security/advisories/GHSA-q279-jhrf-cc6v"},{"source":"pysec","sourceId":"PYSEC-2026-520","url":"https://github.com/ray-project/ray/security/advisories/GHSA-q279-jhrf-cc6v"},{"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","modified":"2026-09-10T03:50:58.426794053Z","url":"https://github.com/ray-project/ray/security/advisories/GHSA-q279-jhrf-cc6v"},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://github.com/ray-project/ray/security/advisories/GHSA-q279-jhrf-cc6v"}]},{"url":"https://github.com/ray-project/ray/commit/70e7c72780bdec075dba6cad1afe0832772bfe09","tags":["x_refsource_MISC","Patch","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2025-11-26T22:28:28.577Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2025-11-26T22:28:28.577Z","url":"https://github.com/ray-project/ray/commit/70e7c72780bdec075dba6cad1afe0832772bfe09"},{"source":"nvd","sourceId":"CVE-2025-62593","modified":"2026-10-19T13:10:00.110","url":"https://github.com/ray-project/ray/commit/70e7c72780bdec075dba6cad1afe0832772bfe09"},{"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","url":"https://github.com/ray-project/ray/commit/70e7c72780bdec075dba6cad1afe0832772bfe09"},{"source":"pysec","sourceId":"PYSEC-2026-520","url":"https://github.com/ray-project/ray/commit/70e7c72780bdec075dba6cad1afe0832772bfe09"},{"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","modified":"2026-09-10T03:50:58.426794053Z","url":"https://github.com/ray-project/ray/commit/70e7c72780bdec075dba6cad1afe0832772bfe09"},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://github.com/ray-project/ray/commit/70e7c72780bdec075dba6cad1afe0832772bfe09"}]},{"url":"https://www.bitsight.com/blog/rondodox-botnet-infrastructure-analysis","tags":["third-party-advisory","Third Party Advisory","KEV report"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-01T18:07:54.129Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-01T18:07:54.129Z","url":"https://www.bitsight.com/blog/rondodox-botnet-infrastructure-analysis"},{"source":"nvd","sourceId":"CVE-2025-62593","modified":"2026-10-19T13:10:00.110","url":"https://www.bitsight.com/blog/rondodox-botnet-infrastructure-analysis"},{"source":"vulncheck-kev","sourceId":"CVE-2025-62593","modified":"2026-03-11T00:00:00Z","url":"https://www.bitsight.com/blog/rondodox-botnet-infrastructure-analysis"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-62593","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-01T18:07:54.129Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-01T18:07:54.129Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-62593"},{"source":"nvd","sourceId":"CVE-2025-62593","modified":"2026-10-19T13:10:00.110","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-62593"}]},{"url":"https://osv.dev/vulnerability/GHSA-q279-jhrf-cc6v","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","modified":"2026-09-10T03:50:58.426794053Z","origins":[{"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","url":"https://osv.dev/vulnerability/GHSA-q279-jhrf-cc6v"},{"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","modified":"2026-09-10T03:50:58.426794053Z","url":"https://osv.dev/vulnerability/GHSA-q279-jhrf-cc6v"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-62593","tags":["ADVISORY","vendor-reference"],"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","modified":"2026-09-10T03:50:58.426794053Z","origins":[{"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-62593"},{"source":"pysec","sourceId":"PYSEC-2026-520","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-62593"},{"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","modified":"2026-09-10T03:50:58.426794053Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-62593"},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-62593"}]},{"url":"https://github.com/nccgroup/singularity/pull/68","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","modified":"2026-09-10T03:50:58.426794053Z","origins":[{"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","url":"https://github.com/nccgroup/singularity/pull/68"},{"source":"pysec","sourceId":"PYSEC-2026-520","url":"https://github.com/nccgroup/singularity/pull/68"},{"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","modified":"2026-09-10T03:50:58.426794053Z","url":"https://github.com/nccgroup/singularity/pull/68"}]},{"url":"https://docs.ray.io/en/releases-2.51.1/ray-security/index.html","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","modified":"2026-09-10T03:50:58.426794053Z","origins":[{"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","url":"https://docs.ray.io/en/releases-2.51.1/ray-security/index.html"},{"source":"pysec","sourceId":"PYSEC-2026-520","url":"https://docs.ray.io/en/releases-2.51.1/ray-security/index.html"},{"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","modified":"2026-09-10T03:50:58.426794053Z","url":"https://docs.ray.io/en/releases-2.51.1/ray-security/index.html"}]},{"url":"https://en.wikipedia.org/wiki/Malvertising","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","modified":"2026-09-10T03:50:58.426794053Z","origins":[{"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","url":"https://en.wikipedia.org/wiki/Malvertising"},{"source":"pysec","sourceId":"PYSEC-2026-520","url":"https://en.wikipedia.org/wiki/Malvertising"},{"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","modified":"2026-09-10T03:50:58.426794053Z","url":"https://en.wikipedia.org/wiki/Malvertising"}]},{"url":"https://github.com/ray-project/ray","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","modified":"2026-09-10T03:50:58.426794053Z","origins":[{"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","url":"https://github.com/ray-project/ray"},{"source":"pysec","sourceId":"PYSEC-2026-520","url":"https://github.com/ray-project/ray"},{"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","modified":"2026-09-10T03:50:58.426794053Z","url":"https://github.com/ray-project/ray"}]},{"url":"https://github.com/ray-project/ray/blob/e7889ae542bf0188610bc8b06d274cbf53790cbd/python/ray/dashboard/http_server_head.py#L184-L196","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","modified":"2026-09-10T03:50:58.426794053Z","origins":[{"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","url":"https://github.com/ray-project/ray/blob/e7889ae542bf0188610bc8b06d274cbf53790cbd/python/ray/dashboard/http_server_head.py#L184-L196"},{"source":"pysec","sourceId":"PYSEC-2026-520","url":"https://github.com/ray-project/ray/blob/e7889ae542bf0188610bc8b06d274cbf53790cbd/python/ray/dashboard/http_server_head.py#L184-L196"},{"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","modified":"2026-09-10T03:50:58.426794053Z","url":"https://github.com/ray-project/ray/blob/e7889ae542bf0188610bc8b06d274cbf53790cbd/python/ray/dashboard/http_server_head.py#L184-L196"}]},{"url":"https://github.com/ray-project/ray/blob/f39a860436dca3ed5b9dfae84bd867ac10c84dc6/python/ray/dashboard/optional_utils.py#L129-L155","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","modified":"2026-09-10T03:50:58.426794053Z","origins":[{"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","url":"https://github.com/ray-project/ray/blob/f39a860436dca3ed5b9dfae84bd867ac10c84dc6/python/ray/dashboard/optional_utils.py#L129-L155"},{"source":"pysec","sourceId":"PYSEC-2026-520","url":"https://github.com/ray-project/ray/blob/f39a860436dca3ed5b9dfae84bd867ac10c84dc6/python/ray/dashboard/optional_utils.py#L129-L155"},{"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","modified":"2026-09-10T03:50:58.426794053Z","url":"https://github.com/ray-project/ray/blob/f39a860436dca3ed5b9dfae84bd867ac10c84dc6/python/ray/dashboard/optional_utils.py#L129-L155"}]},{"url":"https://osv.dev/vulnerability/PYSEC-2026-520","tags":["ADVISORY"],"source":"pysec","sourceId":"PYSEC-2026-520","modified":"2026-07-01T20:23:03.643178Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-520","url":"https://osv.dev/vulnerability/PYSEC-2026-520"},{"source":"pysec","sourceId":"PYSEC-2026-520","modified":"2026-07-01T20:23:03.643178Z","url":"https://osv.dev/vulnerability/PYSEC-2026-520"}]},{"url":"https://pypi.org/project/ray","tags":["PACKAGE"],"source":"pysec","sourceId":"PYSEC-2026-520","modified":"2026-07-01T20:23:03.643178Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-520","url":"https://pypi.org/project/ray"},{"source":"pysec","sourceId":"PYSEC-2026-520","modified":"2026-07-01T20:23:03.643178Z","url":"https://pypi.org/project/ray"}]},{"url":"https://github.com/advisories/GHSA-q279-jhrf-cc6v","tags":["ADVISORY"],"source":"pysec","sourceId":"PYSEC-2026-520","modified":"2026-07-01T20:23:03.643178Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-520","url":"https://github.com/advisories/GHSA-q279-jhrf-cc6v"},{"source":"pysec","sourceId":"PYSEC-2026-520","modified":"2026-07-01T20:23:03.643178Z","url":"https://github.com/advisories/GHSA-q279-jhrf-cc6v"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2025-62593","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://access.redhat.com/security/cve/CVE-2025-62593"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2417394","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2417394"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-62593","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2025-62593"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:23080","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://access.redhat.com/errata/RHSA-2025:23080"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:23204","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://access.redhat.com/errata/RHSA-2025:23204"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:23078","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://access.redhat.com/errata/RHSA-2025:23078"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:3462","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://access.redhat.com/errata/RHSA-2026:3462"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:23531","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://access.redhat.com/errata/RHSA-2025:23531"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:1027","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://access.redhat.com/errata/RHSA-2026:1027"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:3713","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://access.redhat.com/errata/RHSA-2026:3713"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:61627","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://access.redhat.com/errata/RHSA-2026:61627"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:3461","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://access.redhat.com/errata/RHSA-2026:3461"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:23079","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://access.redhat.com/errata/RHSA-2025:23079"}]},{"source":"euvd","sourceId":"EUVD-2025-199754","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-199754","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2025-199754","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-199754"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2025-62593","modified":"2026-03-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-62593","modified":"2026-03-11T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://previdian.com/CVE-2025-62593","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-62593","modified":"2026-03-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-62593","modified":"2026-03-11T00:00:00Z","url":"https://previdian.com/CVE-2025-62593"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-62593","modified":"2026-03-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-62593","modified":"2026-03-11T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://expel.com/blog/the-ai-cve-exploitation-evidence-story-headlines-are-scarier-than-reality/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-62593","modified":"2026-03-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-62593","modified":"2026-03-11T00:00:00Z","url":"https://expel.com/blog/the-ai-cve-exploitation-evidence-story-headlines-are-scarier-than-reality/"}]},{"url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-62593","modified":"2026-03-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-62593","modified":"2026-03-11T00:00:00Z","url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape"}]},{"url":"https://vulncheck.com/xdb/4aa71384a03e","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"4aa71384a03e","modified":"2026-03-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"4aa71384a03e","modified":"2026-03-11T00:00:00Z","url":"https://vulncheck.com/xdb/4aa71384a03e"}]},{"url":"https://github.com/Boreas37/CVE-2025-62593-PoC","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"4aa71384a03e","modified":"2026-03-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"4aa71384a03e","modified":"2026-03-11T00:00:00Z","url":"https://github.com/Boreas37/CVE-2025-62593-PoC"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","url":"https://osv.dev/vulnerability/GHSA-q279-jhrf-cc6v","ecosystem":"PyPI","name":"ray","purl":"pkg:pypi/ray","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.0"}]}],"versions":["0.1.1","0.1.2","0.2.0","0.2.1","0.2.2","0.3.0","0.3.1","0.4.0","0.5.0","0.5.2","0.5.3","0.6.0","0.6.1","0.6.2","0.6.3","0.6.4","0.6.5","0.6.6","0.7.0","0.7.1","0.7.2","0.7.3","0.7.4","0.7.5","0.7.6","0.7.7","0.8.0","0.8.1","0.8.2","0.8.3","0.8.4","0.8.5","0.8.6","0.8.7","1.0.0","1.0.1","1.1.0","1.10.0","1.11.0","1.11.1","1.12.0","1.12.1","1.13.0","1.2.0","1.3.0","1.4.0","1.4.1","1.5.0","1.5.1","1.5.2","1.6.0","1.7.0","1.7.1","1.8.0","1.9.0","1.9.1","1.9.2","2.0.0","2.0.1","2.1.0","2.10.0","2.11.0","2.12.0","2.2.0","2.20.0","2.21.0","2.22.0","2.23.0","2.24.0","2.3.0","2.3.0rc0","2.3.1","2.30.0","2.31.0","2.32.0","2.32.0rc0","2.33.0","2.34.0","2.35.0","2.36.0","2.36.1","2.37.0","2.38.0","2.39.0","2.4.0","2.40.0","2.41.0","2.42.0","2.42.1","2.43.0","2.44.0","2.44.1","2.45.0","2.46.0","2.47.0","2.47.1","2.48.0","2.49.0","2.49.1","2.49.2","2.5.0","2.5.1","2.50.0","2.50.1","2.51.0","2.51.1","2.51.2","2.6.0","2.6.1","2.6.2","2.6.3","2.7.0","2.7.0rc0","2.7.1","2.7.2","2.8.0","2.8.1","2.9.0","2.9.1","2.9.2","2.9.3"],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/11/GHSA-q279-jhrf-cc6v/GHSA-q279-jhrf-cc6v.json"},"modified":"2026-09-10T03:50:58.426794053Z","origins":[{"source":"ghsa","sourceId":"GHSA-q279-jhrf-cc6v","modified":"2026-09-10T03:50:58.426794053Z","url":"https://osv.dev/vulnerability/GHSA-q279-jhrf-cc6v"}]},{"source":"pysec","sourceId":"PYSEC-2026-520","url":"https://osv.dev/vulnerability/PYSEC-2026-520","ecosystem":"PyPI","name":"ray","purl":"pkg:pypi/ray","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.0"}]}],"versions":["0.1.1","0.1.2","0.2.0","0.2.1","0.2.2","0.3.0","0.3.1","0.4.0","0.5.0","0.5.2","0.5.3","0.6.0","0.6.1","0.6.2","0.6.3","0.6.4","0.6.5","0.6.6","0.7.0","0.7.1","0.7.2","0.7.3","0.7.4","0.7.5","0.7.6","0.7.7","0.8.0","0.8.1","0.8.2","0.8.3","0.8.4","0.8.5","0.8.6","0.8.7","1.0.0","1.0.1","1.1.0","1.10.0","1.11.0","1.11.1","1.12.0","1.12.1","1.13.0","1.2.0","1.3.0","1.4.0","1.4.1","1.5.0","1.5.1","1.5.2","1.6.0","1.7.0","1.7.1","1.8.0","1.9.0","1.9.1","1.9.2","2.0.0","2.0.1","2.1.0","2.10.0","2.11.0","2.12.0","2.2.0","2.20.0","2.21.0","2.22.0","2.23.0","2.24.0","2.3.0","2.3.0rc0","2.3.1","2.30.0","2.31.0","2.32.0","2.32.0rc0","2.33.0","2.34.0","2.35.0","2.36.0","2.36.1","2.37.0","2.38.0","2.39.0","2.4.0","2.40.0","2.41.0","2.42.0","2.42.1","2.43.0","2.44.0","2.44.1","2.45.0","2.46.0","2.47.0","2.47.1","2.48.0","2.49.0","2.49.1","2.49.2","2.5.0","2.5.1","2.50.0","2.50.1","2.51.0","2.51.1","2.51.2","2.6.0","2.6.1","2.6.2","2.6.3","2.7.0","2.7.0rc0","2.7.1","2.7.2","2.8.0","2.8.1","2.9.0","2.9.1","2.9.2","2.9.3"],"databaseSpecific":{"source":"https://github.com/pypa/advisory-database/blob/main/vulns/ray/PYSEC-2026-520.yaml"},"modified":"2026-07-01T20:23:03.643178Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-520","modified":"2026-07-01T20:23:03.643178Z","url":"https://osv.dev/vulnerability/PYSEC-2026-520"}]}],"pocCandidates":[{"url":"https://github.com/Boreas37/CVE-2025-62593-PoC","source":"poc-in-github","sourceId":"CVE-2025-62593","description":"PoC for CVE-2025-62593: unauthenticated RCE in Ray (CISA KEV). Stdlib-only Python.","modified":"2026-08-19T09:22:13Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-62593","url":"https://github.com/Boreas37/CVE-2025-62593-PoC"},{"source":"poc-in-github","sourceId":"CVE-2025-62593","modified":"2026-08-19T09:22:13Z","url":"https://github.com/Boreas37/CVE-2025-62593-PoC"}],"tags":[]},{"url":"https://github.com/maxprog-svg/CVE-2026-33017","source":"poc-in-github","sourceId":"CVE-2025-62593","description":"CVE-2025-62593 — Ray Unauthenticated RCE Exploit is an unauthenticated remote code execution vulnerability in the Ray distributed AI compute engine. ","modified":"2026-09-01T18:34:45Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-62593","url":"https://github.com/maxprog-svg/CVE-2026-33017"},{"source":"poc-in-github","sourceId":"CVE-2025-62593","modified":"2026-09-01T18:34:45Z","url":"https://github.com/maxprog-svg/CVE-2026-33017"}],"tags":[]}],"cataloguedPoc":[{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"4aa71384a03e","url":"https://vulncheck.com/xdb/4aa71384a03e","cve":"CVE-2025-62593","dateAdded":"2026-08-18T22:07:01Z","modified":"2026-03-11T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/Boreas37/CVE-2025-62593-PoC","observations":[{"dateAdded":"2026-08-18T22:07:01Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"4aa71384a03e","modified":"2026-03-11T00:00:00Z","url":"https://vulncheck.com/xdb/4aa71384a03e"}]}],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat AI Inference Server 3.2:registry.redhat.io/rhaiis/model-opt-cuda-rhel9@sha256:14e32e88f1b89f59ed34a6d712746b82a6a54c6ed4727784f18aeff853abbdc7_arm64","product":"registry.redhat.io/rhaiis/model-opt-cuda-rhel9@sha256:14e32e88f1b89f59ed34a6d712746b82a6a54c6ed4727784f18aeff853abbdc7_arm64 as a component of Red Hat AI Inference Server 3.2","status":"fixed","remediations":[{"category":"vendor_fix","details":"For more information visit https://access.redhat.com/errata/RHSA-2025:23080","url":"https://access.redhat.com/errata/RHSA-2025:23080"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:oci/model-opt-cuda-rhel9@sha256%3A14e32e88f1b89f59ed34a6d712746b82a6a54c6ed4727784f18aeff853abbdc7?arch=arm64&repository_url=registry.redhat.io/rhaiis&tag=3.2.2-1764871796","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat AI Inference Server 3.2:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:7b04c0154c486aa7dd103ddeaf6bea7b9851859c33a4b979a85261a44a7b77f2_amd64","product":"registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:7b04c0154c486aa7dd103ddeaf6bea7b9851859c33a4b979a85261a44a7b77f2_amd64 as a component of Red Hat AI Inference Server 3.2","status":"fixed","remediations":[{"category":"vendor_fix","details":"For more information visit https://access.redhat.com/errata/RHSA-2025:23204","url":"https://access.redhat.com/errata/RHSA-2025:23204"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:oci/vllm-cuda-rhel9@sha256%3A7b04c0154c486aa7dd103ddeaf6bea7b9851859c33a4b979a85261a44a7b77f2?arch=amd64&repository_url=registry.redhat.io/rhaiis&tag=3.2.5-1765552580","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat AI Inference Server 3.2:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:ec961e5acfde5c1ad0a7e0e2c86a0bf56b9bc46357fa124f9db6dff1006076ab_arm64","product":"registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:ec961e5acfde5c1ad0a7e0e2c86a0bf56b9bc46357fa124f9db6dff1006076ab_arm64 as a component of Red Hat AI Inference Server 3.2","status":"fixed","remediations":[{"category":"vendor_fix","details":"For more information visit https://access.redhat.com/errata/RHSA-2025:23078","url":"https://access.redhat.com/errata/RHSA-2025:23078"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:oci/vllm-cuda-rhel9@sha256%3Aec961e5acfde5c1ad0a7e0e2c86a0bf56b9bc46357fa124f9db6dff1006076ab?arch=arm64&repository_url=registry.redhat.io/rhaiis&tag=3.2.2-1765379088","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat AI Inference Server 3.2:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:53007894763e03f609c35c727cb738db3c2130b19fa0e1069c24240e0870fb7a_amd64","product":"registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:53007894763e03f609c35c727cb738db3c2130b19fa0e1069c24240e0870fb7a_amd64 as a component of Red Hat AI Inference Server 3.2","status":"fixed","remediations":[{"category":"vendor_fix","details":"For more information visit https://access.redhat.com/errata/RHSA-2026:3462","url":"https://access.redhat.com/errata/RHSA-2026:3462"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:oci/vllm-rocm-rhel9@sha256%3A53007894763e03f609c35c727cb738db3c2130b19fa0e1069c24240e0870fb7a?arch=amd64&repository_url=registry.redhat.io/rhaiis&tag=1772160625","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kserve-agent-rhel9@sha256:7caa5349317343219fa6a504ff80b04904df78adbc60b34a3b1951e072db513a_amd64","product":"registry.redhat.io/rhoai/odh-kserve-agent-rhel9@sha256:7caa5349317343219fa6a504ff80b04904df78adbc60b34a3b1951e072db513a_amd64 as a component of Red Hat OpenShift AI 2.25","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 2.25.1 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2025:23531"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:oci/odh-kserve-agent-rhel9@sha256%3A7caa5349317343219fa6a504ff80b04904df78adbc60b34a3b1951e072db513a?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=v2.25.1-1765613316","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kserve-controller-rhel9@sha256:4bbfad1a5fde624a13c3edd27962e5b8bf7782ea4cd5f64b3a996d308e3be365_ppc64le","product":"registry.redhat.io/rhoai/odh-kserve-controller-rhel9@sha256:4bbfad1a5fde624a13c3edd27962e5b8bf7782ea4cd5f64b3a996d308e3be365_ppc64le as a component of Red Hat OpenShift AI 2.25","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 2.25.1 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2025:23531"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:oci/odh-kserve-controller-rhel9@sha256%3A4bbfad1a5fde624a13c3edd27962e5b8bf7782ea4cd5f64b3a996d308e3be365?arch=ppc64le&repository_url=registry.redhat.io/rhoai&tag=v2.25.1-1765613316","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kserve-router-rhel9@sha256:605f8418c5c32d9a0936b4563a79fca6eeaef3bba7ca1b6abb91b0b1e84e4dd3_ppc64le","product":"registry.redhat.io/rhoai/odh-kserve-router-rhel9@sha256:605f8418c5c32d9a0936b4563a79fca6eeaef3bba7ca1b6abb91b0b1e84e4dd3_ppc64le as a component of Red Hat OpenShift AI 2.25","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 2.25.1 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2025:23531"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:oci/odh-kserve-router-rhel9@sha256%3A605f8418c5c32d9a0936b4563a79fca6eeaef3bba7ca1b6abb91b0b1e84e4dd3?arch=ppc64le&repository_url=registry.redhat.io/rhoai&tag=v2.25.1-1765613316","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kserve-router-rhel9@sha256:bdb164d90a0ad4cf3640afb518371e7b91c7682cc0b1e98e025ca1d64b927efc_amd64","product":"registry.redhat.io/rhoai/odh-kserve-router-rhel9@sha256:bdb164d90a0ad4cf3640afb518371e7b91c7682cc0b1e98e025ca1d64b927efc_amd64 as a component of Red Hat OpenShift AI 2.25","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 2.25.1 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2025:23531"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:oci/odh-kserve-router-rhel9@sha256%3Abdb164d90a0ad4cf3640afb518371e7b91c7682cc0b1e98e025ca1d64b927efc?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=v2.25.1-1765613316","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9@sha256:e9a1cdebc0511256b293f04741e81461d8113ef4cc891a9d85683aa862baaf7a_arm64","product":"registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9@sha256:e9a1cdebc0511256b293f04741e81461d8113ef4cc891a9d85683aa862baaf7a_arm64 as a component of Red Hat OpenShift AI 2.25","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 2.25.1 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2025:23531"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:oci/odh-kserve-storage-initializer-rhel9@sha256%3Ae9a1cdebc0511256b293f04741e81461d8113ef4cc891a9d85683aa862baaf7a?arch=arm64&repository_url=registry.redhat.io/rhoai&tag=v2.25.1-1765326513","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat OpenShift AI 3.2:registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:bc6f025d5db7f46f592ddead36eb978205aa0127c5872ff820850e4fdbef7a76_ppc64le","product":"registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:bc6f025d5db7f46f592ddead36eb978205aa0127c5872ff820850e4fdbef7a76_ppc64le as a component of Red Hat OpenShift AI 3.2","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:1027"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:oci/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256%3Abc6f025d5db7f46f592ddead36eb978205aa0127c5872ff820850e4fdbef7a76?arch=ppc64le&repository_url=registry.redhat.io/rhoai&tag=1768223146","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat OpenShift AI 3.2:registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9@sha256:116c00cfc715a100815554b18128f29b61ded103d4612a8bf222c664114c06bc_amd64","product":"registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9@sha256:116c00cfc715a100815554b18128f29b61ded103d4612a8bf222c664114c06bc_amd64 as a component of Red Hat OpenShift AI 3.2","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:1027"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:oci/odh-pipeline-runtime-pytorch-rocm-py312-rhel9@sha256%3A116c00cfc715a100815554b18128f29b61ded103d4612a8bf222c664114c06bc?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1768223412","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat OpenShift AI 3.2:registry.redhat.io/rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256:11b72ab55ad9981d617d7ecc9bccb84be66e777f2e248ede01f774c90d00f6da_arm64","product":"registry.redhat.io/rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256:11b72ab55ad9981d617d7ecc9bccb84be66e777f2e248ede01f774c90d00f6da_arm64 as a component of Red Hat OpenShift AI 3.2","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:1027"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:oci/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256%3A11b72ab55ad9981d617d7ecc9bccb84be66e777f2e248ede01f774c90d00f6da?arch=arm64&repository_url=registry.redhat.io/rhoai&tag=1768306110","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat OpenShift AI 3.2:registry.redhat.io/rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256:a0ad080290361108300fbacfb5709b81c4253fe638fa6ca7af0a9383056aa7f7_amd64","product":"registry.redhat.io/rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256:a0ad080290361108300fbacfb5709b81c4253fe638fa6ca7af0a9383056aa7f7_amd64 as a component of Red Hat OpenShift AI 3.2","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:1027"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:oci/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256%3Aa0ad080290361108300fbacfb5709b81c4253fe638fa6ca7af0a9383056aa7f7?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1768306110","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat OpenShift AI 3.2:registry.redhat.io/rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9@sha256:a73fb5448052d4e27b9cd8268f9405ad13dfd267acde13d6c1f3a920bb7cc432_arm64","product":"registry.redhat.io/rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9@sha256:a73fb5448052d4e27b9cd8268f9405ad13dfd267acde13d6c1f3a920bb7cc432_arm64 as a component of Red Hat OpenShift AI 3.2","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:1027"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:oci/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9@sha256%3Aa73fb5448052d4e27b9cd8268f9405ad13dfd267acde13d6c1f3a920bb7cc432?arch=arm64&repository_url=registry.redhat.io/rhoai&tag=1768224395","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat OpenShift AI 3.2:registry.redhat.io/rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9@sha256:a53a80f4e2be8919e59e938002ed5776270f2ec10d841c38d30e778d17f15500_s390x","product":"registry.redhat.io/rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9@sha256:a53a80f4e2be8919e59e938002ed5776270f2ec10d841c38d30e778d17f15500_s390x as a component of Red Hat OpenShift AI 3.2","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:1027"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:oci/odh-workbench-jupyter-trustyai-cpu-py312-rhel9@sha256%3Aa53a80f4e2be8919e59e938002ed5776270f2ec10d841c38d30e778d17f15500?arch=s390x&repository_url=registry.redhat.io/rhoai&tag=1768253628","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat OpenShift AI 3.3:registry.redhat.io/rhoai/odh-vllm-gaudi-rhel9@sha256:30dd95f0c900b81b80e435796d82dd556814dd6d46c6b43b7dd879bcfdb8420e_amd64","product":"registry.redhat.io/rhoai/odh-vllm-gaudi-rhel9@sha256:30dd95f0c900b81b80e435796d82dd556814dd6d46c6b43b7dd879bcfdb8420e_amd64 as a component of Red Hat OpenShift AI 3.3","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.3 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:3713"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"purl":"pkg:oci/odh-vllm-gaudi-rhel9@sha256%3A30dd95f0c900b81b80e435796d82dd556814dd6d46c6b43b7dd879bcfdb8420e?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1770956034","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-vllm-cuda-rhel9","product":"rhoai/odh-vllm-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/odh-vllm-cuda-rhel9?repository_url=registry.redhat.io/rhoai/odh-vllm-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:030379c0fb216de4f871c3fb09ab5acc4996f0be1da03fdb1b1726bb60a31554_s390x","product":"registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:030379c0fb216de4f871c3fb09ab5acc4996f0be1da03fdb1b1726bb60a31554_s390x as a component of Red Hat OpenShift AI 2.25","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-built-in-detector-rhel9@sha256%3A030379c0fb216de4f871c3fb09ab5acc4996f0be1da03fdb1b1726bb60a31554?arch=s390x&repository_url=registry.redhat.io/rhoai&tag=v2.25.1-1764757773","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:cfb1e6a15c2ac160b7b917c69936b21651f5a39f5f371679f06077ff6079b561_amd64","product":"registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:cfb1e6a15c2ac160b7b917c69936b21651f5a39f5f371679f06077ff6079b561_amd64 as a component of Red Hat OpenShift AI 2.25","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-kueue-controller-rhel9@sha256%3Acfb1e6a15c2ac160b7b917c69936b21651f5a39f5f371679f06077ff6079b561?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=v2.25.1-1764809705","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:028d761574f0d607f3197338f9eacb892bf60edb422d4a843223959cacdb53db_arm64","product":"registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:028d761574f0d607f3197338f9eacb892bf60edb422d4a843223959cacdb53db_arm64 as a component of Red Hat OpenShift AI 2.25","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-model-registry-job-async-upload-rhel9@sha256%3A028d761574f0d607f3197338f9eacb892bf60edb422d4a843223959cacdb53db?arch=arm64&repository_url=registry.redhat.io/rhoai&tag=v2.25.1-1764839042","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:7adb580c0020d44dc65093d4087c5bfbd21a400c87da05f5a5dc3a586046b52f_arm64","product":"registry.redhat.io/rhoai/odh-rhel9-operator@sha256:7adb580c0020d44dc65093d4087c5bfbd21a400c87da05f5a5dc3a586046b52f_arm64 as a component of Red Hat OpenShift AI 2.25","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-rhel9-operator@sha256%3A7adb580c0020d44dc65093d4087c5bfbd21a400c87da05f5a5dc3a586046b52f?arch=arm64&repository_url=registry.redhat.io/rhoai&tag=v2.25.1-1765803508","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9@sha256:f79abc8a411d994d0af1ec388d10920ad61c34d4979a71998a8305f4feaf0fd4_amd64","product":"registry.redhat.io/rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9@sha256:f79abc8a411d994d0af1ec388d10920ad61c34d4979a71998a8305f4feaf0fd4_amd64 as a component of Red Hat OpenShift AI 2.25","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-workbench-jupyter-minimal-cpu-py312-rhel9@sha256%3Af79abc8a411d994d0af1ec388d10920ad61c34d4979a71998a8305f4feaf0fd4?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=v2.25.1-1764961121","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat OpenShift AI 3.2:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:6c42f0be9b0996f7788bb37f21daa37c11769383d3cdbef8062b217e638f0607_arm64","product":"registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:6c42f0be9b0996f7788bb37f21daa37c11769383d3cdbef8062b217e638f0607_arm64 as a component of Red Hat OpenShift AI 3.2","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-kf-notebook-controller-rhel9@sha256%3A6c42f0be9b0996f7788bb37f21daa37c11769383d3cdbef8062b217e638f0607?arch=arm64&repository_url=registry.redhat.io/rhoai&tag=1768409657","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat OpenShift AI 3.2:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:9c4a02294c82e0f920485aefe0479342adf93dcadfe3e7a98b172ac2fe8c8043_ppc64le","product":"registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:9c4a02294c82e0f920485aefe0479342adf93dcadfe3e7a98b172ac2fe8c8043_ppc64le as a component of Red Hat OpenShift AI 3.2","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-ml-pipelines-launcher-rhel9@sha256%3A9c4a02294c82e0f920485aefe0479342adf93dcadfe3e7a98b172ac2fe8c8043?arch=ppc64le&repository_url=registry.redhat.io/rhoai&tag=1768223313","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat OpenShift AI 3.2:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:2f6b441d0fe7a1e8f85bb340b7551341b7c4b366cdc1f9f2a6a35e6cf291847e_amd64","product":"registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:2f6b441d0fe7a1e8f85bb340b7551341b7c4b366cdc1f9f2a6a35e6cf291847e_amd64 as a component of Red Hat OpenShift AI 3.2","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-model-registry-rhel9@sha256%3A2f6b441d0fe7a1e8f85bb340b7551341b7c4b366cdc1f9f2a6a35e6cf291847e?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1768410470","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat OpenShift AI 3.2:registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:43c0a2920347c76639a7546964b175a119312e89786a44496590e264b6cd9d58_arm64","product":"registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:43c0a2920347c76639a7546964b175a119312e89786a44496590e264b6cd9d58_arm64 as a component of Red Hat OpenShift AI 3.2","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256%3A43c0a2920347c76639a7546964b175a119312e89786a44496590e264b6cd9d58?arch=arm64&repository_url=registry.redhat.io/rhoai&tag=1768224425","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat OpenShift AI 3.3:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:93660141b12c0d6a9a4bbeacda9053f531c3e739a419e288a2c985747c9ab245_ppc64le","product":"registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:93660141b12c0d6a9a4bbeacda9053f531c3e739a419e288a2c985747c9ab245_ppc64le as a component of Red Hat OpenShift AI 3.3","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-data-science-pipelines-argo-argoexec-rhel9@sha256%3A93660141b12c0d6a9a4bbeacda9053f531c3e739a419e288a2c985747c9ab245?arch=ppc64le&repository_url=registry.redhat.io/rhoai&tag=1771500865","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat OpenShift AI 3.3:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:0e30cd189606d11bf40af1702dfcc7e675cddc1cb3ad6a5820bac0ade18a26fc_arm64","product":"registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:0e30cd189606d11bf40af1702dfcc7e675cddc1cb3ad6a5820bac0ade18a26fc_arm64 as a component of Red Hat OpenShift AI 3.3","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-kuberay-operator-controller-rhel9@sha256%3A0e30cd189606d11bf40af1702dfcc7e675cddc1cb3ad6a5820bac0ade18a26fc?arch=arm64&repository_url=registry.redhat.io/rhoai&tag=1771433421","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat OpenShift AI 3.3:registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:4c38feae457c214c8cecd6e951f72795af353f04b49f1f13b916a9239877967e_arm64","product":"registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:4c38feae457c214c8cecd6e951f72795af353f04b49f1f13b916a9239877967e_arm64 as a component of Red Hat OpenShift AI 3.3","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-mod-arch-maas-rhel9@sha256%3A4c38feae457c214c8cecd6e951f72795af353f04b49f1f13b916a9239877967e?arch=arm64&repository_url=registry.redhat.io/rhoai&tag=1771880183","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat OpenShift AI 3.3:registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:bd10dadf6abf9c98b8c44258ccbbfd488d9daf722501e4381ac4088871db11df_s390x","product":"registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:bd10dadf6abf9c98b8c44258ccbbfd488d9daf722501e4381ac4088871db11df_s390x as a component of Red Hat OpenShift AI 3.3","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256%3Abd10dadf6abf9c98b8c44258ccbbfd488d9daf722501e4381ac4088871db11df?arch=s390x&repository_url=registry.redhat.io/rhoai&tag=1771502869","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"Red Hat OpenShift AI 3.3:registry.redhat.io/rhoai/odh-trustyai-service-operator-rhel9@sha256:ce76c80916a20d7724824975c56dc7fd6d16e6acafa37a504a879a711cb84001_amd64","product":"registry.redhat.io/rhoai/odh-trustyai-service-operator-rhel9@sha256:ce76c80916a20d7724824975c56dc7fd6d16e6acafa37a504a879a711cb84001_amd64 as a component of Red Hat OpenShift AI 3.3","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-trustyai-service-operator-rhel9@sha256%3Ace76c80916a20d7724824975c56dc7fd6d16e6acafa37a504a879a711cb84001?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1771365757","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]},{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-model-registry-rhel9","product":"rhoai/odh-model-registry-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-model-registry-rhel9?repository_url=registry.redhat.io/rhoai/odh-model-registry-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2025-62593","modified":"2026-08-31T13:43:09+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-62593.json"}]}],"vendorCoverage":{"total":680,"shown":32,"omitted":648,"source":"redhat"},"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2025-62593","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-03-11T00:00:00Z","modified":"2026-03-11T00:00:00Z","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"Ray-Project","product":"Ray","dueDate":"2026-08-20T00:00:00Z","cisaDateAdded":"2026-08-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-62593","modified":"2026-03-11T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-62593","catalog":"VulnCheck KEV","kind":"report","url":"https://www.bitsight.com/blog/rondodox-botnet-infrastructure-analysis","dateAdded":"2026-03-11T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-62593","url":"https://www.bitsight.com/blog/rondodox-botnet-infrastructure-analysis"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-62593","catalog":"VulnCheck KEV","kind":"report","url":"https://previdian.com/CVE-2025-62593","dateAdded":"2026-08-17T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-62593","url":"https://previdian.com/CVE-2025-62593"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-62593","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","dateAdded":"2026-08-18T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-62593","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-62593","catalog":"VulnCheck KEV","kind":"report","url":"https://expel.com/blog/the-ai-cve-exploitation-evidence-story-headlines-are-scarier-than-reality/","dateAdded":"2026-08-27T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-62593","url":"https://expel.com/blog/the-ai-cve-exploitation-evidence-story-headlines-are-scarier-than-reality/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-62593","catalog":"VulnCheck KEV","kind":"report","url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape","dateAdded":"2026-09-08T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-62593","url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape"}]}]}