Ray Dashboard DNS Rebinding Code Injection RCE

This repository is a small standalone Python proof-of-concept exploit for CVE-2025-62593 affecting Ray. It contains three files: a .gitignore, a README describing the vulnerability and usage, and the main exploit script ray_rce_poc.py. The code is stdlib-only and intended to directly exercise Ray Dashboard HTTP API endpoints rather than relying on the browser-based DNS rebinding scenario mentioned in the README. The exploit workflow is straightforward and operational: it accepts either a single target URL or a file of targets, builds a malicious Ray job entrypoint, submits that job to POST /api/jobs/, polls GET /api/jobs/ until the submitted job reaches a terminal state, and then fetches GET /api/jobs/<submission_id>/logs to recover command output. The payload is attacker-controlled via --command and is wrapped inside a Python one-liner that executes the shell command on the Ray head node, redirects stdout/stderr to a randomized file under /tmp, and prints the captured contents back into the Ray logs. The script includes basic vulnerability triage logic: HTTP 401/403/404 responses are treated as not vulnerable or inaccessible, while HTTP 200 with a returned submission_id is treated as successful job submission. It is not merely a detector because it actively executes arbitrary commands and confirms RCE by retrieving output. It supports batch scanning from a targets file and can write a JSON summary of results. Overall, the repository’s purpose is to provide a practical unauthenticated remote code execution PoC against exposed Ray Dashboard instances on port 8265.