CVE-2026-32981General(anyscale / ray)

LOWCVSS 8.7 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied paths in the static file handling mechanism, an attacker can use traversal sequences (e.g., ../) to access files outside the intended static directory, resulting in local file disclosure.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-22

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • ray

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • General: 2 classified signals
  • Disclosure: 1 classified signal
  • Peaked at 2 mentions on most recent observed day (2026-03-18)
  • 3 total mentions across 2 days

Affected systems

Vendors
Products
ray

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-03-17: 1Mentions · 2026-03-18: 2Technical Details · 2026-03-18: 103-1703-18
Signal classification2 categories
General
266.7%
Disclosure
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-03-171
General1
2026-03-182
Disclosure1General1
Full discourse3 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-32981 A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user… https://www.cve.org/CVERecord?id=CVE-2026-32981

    Post summary

    The text announces a path traversal vulnerability in Ray Dashboard (pre‑2.8.1), providing technical details without mentioning PoC, exploit, active exploitation, or a patch.

    00000159
    56.7K followersView on X
  • RedPacket Security@RedPacketSec
    General

    CVE Alert: CVE-2026-32981 - ray-project - Ray - https://www.redpacketsecurity.com/cve-alert-cve-2026-32981-ray-project-ray/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-32981 #ray-project #ray

    Post summary

    The text lists a CVE identifier and a link but offers no further details about the vulnerability, exploitability, or mitigation.

    0000084
    3.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-32981 Path Traversal in Ray Dashboard Enables Unauthorized File Access Before 2.8.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-32981

    Post summary

    The text announces a path traversal flaw in Ray Dashboard (CVE-2026-32981) but provides no detailed technical data, PoC, or mitigation information.

    0000046
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appanyscaleray---

Explore more