CVE-2026-32981 - Vulnerability Analysis

Overview

Ray Dashboard < 2.8.1 contains a path traversal caused by improper validation of user-supplied paths in static file handling, letting attackers access files outside intended directories, exploit requires network access.

Severity & Score

Impact

Attackers can access arbitrary local files, leading to sensitive information disclosure.

Mitigation

Update to version 2.8.1 or later.

References

• https://github.com/ray-project/ray
• https://packetstorm.news/files/id/215801/
• https://www.vulncheck.com/advisories/ray-dashboard-path-traversal-leading-to-local-file-disclosure

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 17, 2026

🟠 CVE-2026-32981 - High (7.5) A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied paths in the static file handling mechanism, an attacker can use traver... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-32981/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner