Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:31:02 +0000 CVE-2026-32981 — Ray Dashboard <= 2.8.0 Path Traversal Leading to Local File Disclosure https://cve.radiocsirt.org/vuln/cve-2026-32981 <p><strong>Affected:</strong> ray-project Ray, Red Hat AI Inference Server 3.2, Red Hat OpenShift AI 2.25, Red Hat OpenShift AI 3.3, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI)</p> <p>A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied paths in the static file handling mechanism, an attacker can use traversal sequences (e.g., ../) to access files outside the intended static directory, resulting in local file disclosure.</p> <p><strong>Affected:</strong> ray-project Ray, Red Hat AI Inference Server 3.2, Red Hat OpenShift AI 2.25, Red Hat OpenShift AI 3.3, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI)</p> <p>A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied paths in the static file handling mechanism, an attacker can use traversal sequences (e.g., ../) to access files outside the intended static directory, resulting in local file disclosure.</p> https://cve.radiocsirt.org/vuln/cve-2026-32981 GHSA-j3mh-qmjj-xp83 — Ray Dashboard is vulnerable to path traversal through its static file handling mechanism https://cve.radiocsirt.org/vuln/ghsa-j3mh-qmjj-xp83 <p><strong>Affected:</strong> PyPI: ray</p> <p>A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied paths in the static file handling mechanism, an attacker can use traversal sequences (e.g., ../) to access files outside the intended static directory, resulting in local file disclosure.</p> <p><strong>Affected:</strong> PyPI: ray</p> <p>A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied paths in the static file handling mechanism, an attacker can use traversal sequences (e.g., ../) to access files outside the intended static directory, resulting in local file disclosure.</p> https://cve.radiocsirt.org/vuln/ghsa-j3mh-qmjj-xp83