8.7
Élevée
CVE-2026-32981 A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1
Description
A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied paths in the static file handling mechanism, an attacker can use traversal sequences (e.g., ../) to access files outside the intended static directory, resulting in local file disclosure.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat AI Inference Server 3.2 1775252598 | premières → < 1775252598 | 1775252598 |
| Red Hat OpenShift AI 2.25 1783998774 | premières → < 1783998774 | 1783998774 |
| Red Hat OpenShift AI 3.3 1778677722 | premières → < 1778677722 | 1778677722 |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | Versions non publiées | |
| Red Hat OpenShift AI (RHOAI) | Versions non publiées | |
| ray 2.8 | premières → < 2.8.1 | 2.8.1 |
Références
- packetstorm.news packetstorm.news
- github.com github.com
- VulnCheck Advisory: Ray Dashboard <= 2.8.0 Path Traversal Leading to Local File Disclosure www.vulncheck.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Red Hat AI Inference Server 3.2
Les 63 CVE de Red Hat AI Inference Server 3.2 →
CVE-2026-15588
Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering
5.3
Moyenne
CVE-2026-16118
Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c
7.1
Élevée
CVE-2026-58015
Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
5.9
Moyenne
CVE-2026-58014
Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
7.3
Élevée