Executive Summary
CISA added an exploited Ray flaw enabling browser-based RCE to KEV; Ray is a distributed framework for AI and ML workloads.
What Happened
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical flaw impacting Ray to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. Ray is an open-source, Python-native distributed computing framework designed to scale artificial intelligence and machine learning workloads. As of writing, the GitHub project has more than
Affected Products
- Ray
Vulnerability / Attack Technique
RCE in AI compute infrastructure
Technical Mechanism
As reported, the flaw can be triggered via a browser.
AI Security Category
LLM03:2025 Supply Chain
Part of the AI Supply Chain and AI SBOM topic.
Relevant Frameworks
RealGround Analysis
Ray clusters hold GPUs, models and data. RealGround analysis: never expose the Ray dashboard.
Recommended Controls
- Update Ray
- Keep Ray dashboards off untrusted networks
Related RealGround Service
AI Agent SBOM and LLM Mapping · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.