Vendor

Ray-Project

1 of 4 Ray-Project CVEs in Patchfirst (25%) are in of vulnerabilities exploited in the wild.

CVEs: 4
In CISA KEV: 125%
Known ransomware use: 0
Median days to KEV: 264; from publication
Latest KEV listing: 17 Aug 2026

Watch Ray-Project Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs

ProductKEVCVEs
Ray In KEV: 1 CVEs: 1
ray-project/ray In KEV: 0 CVEs: 3

Top ATT&CK techniques

What attackers do with Ray-Project CVEs

TechniqueCVEs
T1059Command and Scripting Interpreter CVEs: 2
T1189Drive-by Compromise CVEs: 1
T1190Exploit Public-Facing Application CVEs: 1

Open in ATT&CK Navigator

A layer for MITRE’s ATT&CK Navigator: techniques scored by the highest Patchfirst priority among their CVEs, neutral to red, with the CVE ids in each comment. “Open in Navigator” loads https://patchfirst.co/navigator/vendor/ray-project.json. Or download it and in Navigator choose Open Existing Layer → Upload from local.

Counts are Ray-Project CVEs linked to the technique. Each link’s provenance is on the CVE page.

Ray-Project CVEs

4 CVEs, by priority

CVE-2025-62593Ray-Project Ray Code Injection Vulnerability
Ray-Project · RayKEVPublic exploitHigh · 8.8T1189Drive-by Compromise T1059Command and Scripting Interpreter
60.2%Top 0.87%
74.0priority
CVE-2023-6019Ray Command Injection in cpu_profile Parameter
ray-project · ray-project/rayPublic exploitCritical · 9.8T1190Exploit Public-Facing Application T1059Command and Scripting Interpreter1 report
74.6%Top 0.5%
36.7priority
CVE-2023-6021Ray Log File Local File Include
ray-project · ray-project/rayPublic exploitHigh · 7.51 report
37.1%Top 1.5%
34.9priority
CVE-2023-6020Ray Static File Local File Include
ray-project · ray-project/rayPublic exploitHigh · 7.51 report
14.7%Top 3.3%
34.5priority