Ray RCE under active attack: patch to 2.52.0 immediately
A CVSS 9.4 hole lets a page you visit run code on your Ray cluster, now in CISA's KEV. Plus DFlash 2's ~3x local speedup and Mojo goes fully open source.
Copy markdown
A web page you visit can run code on your Ray cluster
CVE-2025-62593 (CVSS 9.4) abuses a weak “User-Agent starts with Mozilla” check plus DNS rebinding, so a malicious site or ad can reach Ray’s unauthenticated dashboard APIs (like /api/jobs) and execute code on your box. The fix is Ray 2.52.0 — upgrade every node and don’t expose the dashboard.
It's already being exploited, and CISA set a clock
CISA added the bug to its Known Exploited Vulnerabilities catalog and gave federal agencies until Aug 20 to patch. The Hacker News reports a “ShadowRay 2.0” campaign herding GPU clusters into a self-replicating crypto-mining botnet. If any Ray instance of yours is reachable, treat this as drop-everything urgent.
DFlash 2: ~3x faster local inference, fully open
Inco AI’s new parallel speculative decoder drafts whole token blocks at once, hitting 2.7–3.4x throughput on Qwen3.8-27B (3.1–4.6x on Muse Glimmer) with no quality loss. Drafters ship for vLLM, SGLang, llama.cpp, Ollama and MLX — roughly 70 tok/s for the 27B on an M5 Max.
Mojo is now fully open source under Apache 2.0
Modular open-sourced the Mojo compiler and standard library under Apache 2.0, alongside its Qualcomm acquisition. The Python-family, GPU-targeting language is now yours to read, fork and embed — a real option when you want Python ergonomics with hand-tuned kernel speed.
Elsewhere: Copilot drops older Claude and Gemini models Sept 1
From September 1, GitHub Copilot removes Claude Opus 4.5/4.6 and Sonnet 4.5 (Sonnet 4.6 stays only for individual annual plans), plus Gemini 3.1 Pro and Raptor Mini. Repoint your default now to Opus 4.7/4.8/5, Sonnet 5, Gemini 3.6 Flash or MAI-Code-1-Flash.