Skip to content
Fencer Vulns
high 7.5

CVE-2026-32981 json

Ray Dashboard <= 2.8.0 Path Traversal Leading to Local File Disclosure

published 2026-03-17 7 mo ago modified 2026-10-08 32 d ago also GHSA-j3mh-qmjj-xp83 , PYSEC-2026-130 , EUVD-2026-12635

cvss
7.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
1.0%
EPSS 1.0% chance of exploitation in 30 days, percentile 61%
public exploits
0
none known

Summary

A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied paths in the static file handling mechanism, an attacker can use traversal sequences (e.g., ../) to access files outside the intended static directory, resulting in local file disclosure.

Patch / fix

  • pypi ray 2.8.1
  • ray-project Ray 2.8.1
  • Red Hat Red Hat AI Inference Server 3.2 1774351144, 1774547384, 1775252598
  • Red Hat Red Hat OpenShift AI 2.25 1780069146, 1780069222, 1780078312, 1780078413, 1780078414, 1780078416, 1780078429, 1780078629, 1780078632, 1780417775, 1783998774
  • Red Hat Red Hat OpenShift AI 3.3 1778677667, 1778677692, 1778677701, 1778677716, 1778677717, 1778677718, 1778677722, 1778677734, 1778677741, 1778677767, 1778677779

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2026-32981 updated cvss 7.5

ray: Ray Dashboard Path Traversal Leading to Local File Disclosure

  • Red Hat AI Inference Server rhaiis-preview/vllm-cuda-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 rhelai3/bootc-cuda-rhel9, rhelai3/bootc-aws-cuda-rhel9, rhelai3/bootc-gcp-cuda-rhel9, rhelai3/bootc-azure-cuda-rhel9 Red Hat OpenShift AI (RHOAI) rhoai/odh-vllm-gaudi-rhel9
    affected: workaround, no fix available
  • Red Hat AI Inference Server 3.2 rhaiis 1774351144, rhaiis 1774547384, rhaiis 1775252598
    fixed: vendor fix RHSA-2026:6761
  • Red Hat OpenShift AI 2.25 rhoai/odh-vllm-cuda-rhel9 1783998774, rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9 1780078429, rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9 1780078632, rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9 1780078413, rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9 1780078629, rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9 1780069222, +6 more
    fixed: vendor fix RHSA-2026:24977
  • Red Hat OpenShift AI 3.3 rhoai 1778677667, rhoai 1778677692, rhoai 1778677701, rhoai 1778677716, rhoai 1778677717, rhoai 1778677718, +5 more
    fixed: vendor fix RHSA-2026:19712
  • Red Hat OpenShift AI (RHOAI) rhoai/odh-kserve-agent-rhel9, rhoai/odh-kserve-router-rhel9, rhoai/odh-kserve-controller-rhel9, rhoai/odh-kserve-storage-initializer-rhel9
    not affected: vulnerable code not in execute path
  • Red Hat OpenShift AI 2.25 rhoai/odh-rhel9-operator 1780513840, rhoai/odh-rhel9-operator 1784004914, rhoai/odh-vllm-cpu-rhel9 1780069252, rhoai/odh-vllm-cpu-rhel9 1782397826, rhoai/odh-dashboard-rhel9 1780467029, rhoai/odh-dashboard-rhel9 1782826282, +135 more Red Hat OpenShift AI 3.3 rhoai 1778239104, rhoai 1778262829, rhoai 1778262856, rhoai 1778262893, rhoai 1778262907, rhoai 1778262952, +65 more
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
Proof of concept is public
Automatable
yes
Technical impact
partial
Assessed
7 mo ago

Exploit prediction

0.97% chance of exploitation in the next 30 days, higher than 61% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • packetstorm.news https://packetstorm.news/files/id/215801/ referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CNA 4.0 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
CNA 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA ADP 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CNA 4.0 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
GitHub 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
OSV 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected packages

ecosystem package affected fixed in
pypi ray
<2.8.1
2.8.1

Affected products

  • ray-project Ray
  • Red Hat Red Hat AI Inference Server 3.2
  • Red Hat Red Hat OpenShift AI 2.25
  • Red Hat Red Hat OpenShift AI 3.3
  • Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
  • Red Hat Red Hat OpenShift AI (RHOAI)

Classification

Weakness
  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.