CVE-2026-32981

EUVD-2026-12635
A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied paths in the static file handling mechanism, an attacker can use traversal sequences (e.g., ../) to access files outside the intended static directory, resulting in local file disclosure.
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
VulnCheckCNA
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 57%
Affected Products (NVD)
VendorProductVersion
anyscaleray
𝑥
< 2.8.1
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
Red HatRed Hat AI Inference Server 3.2
1774351144 ≤
𝑥
< *
ADP
Red HatRed Hat AI Inference Server 3.2
1774547384 ≤
𝑥
< *
ADP
Red HatRed Hat AI Inference Server 3.2
1775252598 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1780078312 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1780078429 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1780078632 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1780078416 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1780417775 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1780069146 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1780078413 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1780078629 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1780078414 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1780078632 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1780069222 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1783998774 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 3.3
1778677779 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 3.3
1778677692 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 3.3
1778677701 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 3.3
1778677741 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 3.3
1778677767 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 3.3
1778677718 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 3.3
1778677716 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 3.3
1778677734 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 3.3
1778677667 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 3.3
1778677717 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 3.3
1778677722 ≤
𝑥
< *
ADP
ray_projectray
𝑥
< 2.8.1
CNA