VYPR
Unrated severityNVD Advisory· Published Mar 17, 2026· Updated Mar 17, 2026

Ray Dashboard <= 2.8.0 Path Traversal Leading to Local File Disclosure

CVE-2026-32981

Description

A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied paths in the static file handling mechanism, an attacker can use traversal sequences (e.g., ../) to access files outside the intended static directory, resulting in local file disclosure.

Affected products

1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.