CISA adds Ray flaw to KEV after evidence of browser RCE
Source headline: CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE
Intelligence Summary
CISA has added a critical Ray vulnerability to its Known Exploited Vulnerabilities (KEV) catalog. The agency cited evidence indicating the flaw is actively exploited. The report notes that Ray is an open-source, Python-native distributed computing framework for scaling artificial intelligence and machine learning workloads. The flaw is described as capable of browser-based remote code execution (RCE). Users running Ray should check for any available fixes and apply patching guidance immediately.
Recommended Action
Inventory where Ray runs in your environment and treat this as an active remediation item. Until then, watch authentication and outbound traffic logs for the indicators described in the source. This signal rests on a single report, so corroborate it before acting on anything irreversible.