RayGHSA-3pww-qvr8-6mhp
Ray Path Traversal vulnerability
Critical9.3CVE-2023-6021 · Published Nov 16, 2023 · updated Sep 10, 2026
LFI in Ray's log API endpoint allows attackers to read any file on the server without authentication. The issue is fixed in version 2.8.1+. Ray maintainers response can be found here: https://www.anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| ray PyPI | < 2.8.1 | 2.8.1 |
Details and references
More Ray advisories
All Ray| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Nov 272025 | Ray's New Token Authentication is Disabled By Default CriticalNov 27, 2025 | Critical | No fix yet |
| Nov 262025 | Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding AttackCriticalNov 26, 2025 | Critical | 2.52.0 |
| Mar 62025 | ray vulnerable to Insertion of Sensitive Information into Log FileMedium6.4Mar 6, 2025 | Medium6.4 | 2.43.0 |
| Nov 282023 | Ray has arbitrary code execution via jobs submission APICritical9.8Nov 28, 2023 | Critical9.8 | No fix yet |
| Nov 162023 | Ray Missing Authorization vulnerabilityCritical9.3Nov 16, 2023 | Critical9.3 | 2.8.1 |
| Nov 162023 | Ray OS Command Injection vulnerabilityCritical9.8Nov 16, 2023 | Critical9.8 | 2.8.1 |