Offensive Testing
Penetration TestingVulnerability AssessmentsRed Team Engagements
Advisory & Research
AI Launch Risk ReviewSecurity Architecture ReviewSecurity ResearchSecurity Awareness Training
Software
Breachwright
Community
AI Security DatabaseAdvent Prompt PwnField Manual
ResearchAboutContact
Get in Touch
← Back to the database
critical · 9.4Maintainer reviewedAASD-2025-0004

Ray dashboard browser guard bypass permits developer workstation code execution

Ray versions before 2.52.0 relied on a browser User-Agent heuristic to protect unauthenticated dashboard job endpoints. In affected Firefox and Safari workflows, a DNS-rebinding attack could bypass that heuristic after a developer visited attacker-controlled content, allowing commands to execute in the Ray process context.

Prerequisites

  • A vulnerable Ray dashboard is reachable from the developer's browser
  • The developer visits attacker-controlled content in an affected Firefox or Safari workflow
  • Network and DNS behavior permit rebinding to the Ray dashboard

Potential impact

  • Arbitrary code execution with the privileges of the Ray process
  • Compromise of developer workstation data and connected resources

Mitigations

  • Upgrade Ray to version 2.52.0 or later
  • Enable Ray dashboard token authentication and restrict dashboard access to trusted clients
  • Bind development dashboards to isolated interfaces and deploy DNS-rebinding protections

Public sources

vendor advisorycve recordpatch

Research note

Not listed in the CISA Known Exploited Vulnerabilities catalog when verified on 2026-07-28.