RayGHSA-j3mh-qmjj-xp83
Ray Dashboard is vulnerable to path traversal through its static file handling mechanism
High7.5CVE-2026-32981 · Published Mar 17, 2026 · updated Jun 9, 2026
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| ray PyPI | < 2.8.1 | 2.8.1 |
Details and references
A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied paths in the static file handling mechanism, an attacker can use traversal sequences (e.g., ../) to access files outside the intended static directory, resulting in local file disclosure.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-22
- Also known as
- CVE-2026-32981, PYSEC-2026-130
More Ray advisories
All Ray| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Feb 20 | Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion) CVE-2026-27482Medium5.9fixed in 2.54.0 | Medium5.9 | 2.54.0 |
| Apr 24 | Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization CVE-2026-41486Highfixed in 2.55.0 | High | 2.55.0 |
| Nov 272025 | Ray's New Token Authentication is Disabled By Default CVE-2025-34351Criticalno fix yet | Critical | No fix yet |
| Nov 262025 | Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack CVE-2025-62593Criticalfixed in 2.52.0 | Critical | 2.52.0 |
| Jul 24 | Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False) CVE-2026-57516High8.8fixed in 2.56.0 | High8.8 | 2.56.0 |
| Mar 62025 | ray vulnerable to Insertion of Sensitive Information into Log File CVE-2025-1979Medium6.4fixed in 2.43.0 | Medium6.4 | 2.43.0 |