CVE-2026-32981: 
Ray vulnerability analysis and mitigation

CVE-2026-32981 is a path traversal vulnerability in the Ray Dashboard component (default port 8265) of Anyscale Ray, an open-source AI compute engine. Due to improper validation and sanitization of user-supplied paths in the static file handling mechanism, unauthenticated remote attackers can use traversal sequences (e.g., ../) to access files outside the intended static directory, resulting in local file disclosure. The vulnerability affects all Ray versions prior to 2.8.1 and was disclosed on March 17, 2026. It carries a CVSS v3.1 base score of 7.5 (High) and a CVSS v4.0 base score of 8.7 (High) (Red Hat CVE, Red Hat Bugzilla).

The root cause is classified as CWE-22 (Improper Limitation of a Pathname to a Restricted Directory — 'Path Traversal'). The vulnerability resides in Ray Dashboard's static file handling mechanism, which fails to properly validate or sanitize user-supplied path inputs before resolving them on the filesystem. An unauthenticated attacker can craft HTTP requests to the dashboard endpoint (default port 8265) containing directory traversal sequences such as ../ to escape the intended static file directory and read arbitrary files accessible to the Ray process. No authentication or special privileges are required, and no user interaction is needed, making this exploitable remotely with low complexity (Red Hat CVE, Red Hat Bugzilla).

Successful exploitation allows an unauthenticated network attacker to read arbitrary files on the host system that are accessible to the Ray process, resulting in a high confidentiality impact with no integrity or availability impact. Sensitive files such as configuration files, credentials, SSH keys, environment variables, or application secrets could be exfiltrated, potentially enabling further lateral movement or privilege escalation within the environment. Given that Ray is commonly deployed in ML/AI infrastructure with access to sensitive model data and cloud credentials, the data exposure risk is significant (Red Hat CVE).

No confirmed working exploit or active in-the-wild exploitation has been observed as of the time of reporting. A reference to a Packet Storm entry exists, but analysis confirmed the page contained no exploit code or reproduction steps relevant to this CVE. The EPSS score is approximately 0.065%, indicating a low probability of exploitation in the near term. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog. A patch is available in Ray 2.8.1 (Red Hat CVE, VulnCheck Advisory).

1. Reconnaissance: Identify internet-facing or network-accessible Ray Dashboard instances using tools like Shodan or Censys, searching for services on port 8265. Confirm the Ray version is prior to 2.8.1.
2. Craft traversal request: Construct an HTTP GET request targeting the Ray Dashboard's static file endpoint, embedding path traversal sequences (e.g., GET /static/../../etc/passwd HTTP/1.1) to escape the intended static directory.
3. Send the request: Transmit the crafted request to the target on port 8265 without any authentication headers, as no credentials are required.
4. Retrieve file contents: If the server is vulnerable, the response body will contain the contents of the targeted file (e.g., /etc/passwd, application config files, or cloud credential files such as ~/.aws/credentials).
5. Escalate access: Use disclosed credentials, SSH keys, or configuration secrets to pivot to other systems or escalate privileges within the environment (Red Hat CVE, VulnCheck Advisory).

• Network: Unusual HTTP GET requests to Ray Dashboard (port 8265) containing ../ or URL-encoded traversal sequences (e.g., %2e%2e%2f, ..%2f) in the path; requests targeting non-dashboard paths such as /etc/, /proc/, or home directories.
• Logs: Ray Dashboard access logs showing requests with traversal patterns in the URL path; HTTP 200 responses to requests for files outside the static directory; repeated requests from a single IP to sensitive file paths.
• File System: No direct file system artifacts expected from read-only exploitation, but evidence of subsequent credential use (e.g., new SSH sessions, cloud API calls from unexpected IPs) may indicate post-exploitation activity.
• Process: Unexpected outbound network connections from the Ray process following dashboard access, potentially indicating use of exfiltrated credentials.

The primary remediation is to upgrade Ray to version 2.8.1 or later, which contains the fix for this path traversal vulnerability. As a temporary workaround, restrict network access to the Ray Dashboard port (8265) using firewall rules or network policies to allow only trusted IP ranges. If the Ray Dashboard is not required for operations, it should be disabled entirely. Red Hat has also issued security errata (RHSA-2026:5809, RHSA-2026:6761, RHSA-2026:6762) for affected Red Hat products (Red Hat CVE, Red Hat Errata 5809).

The vulnerability received standard coverage from security aggregators and community feeds including RedPacket Security, CVEFeed, and Mastodon security accounts shortly after disclosure on March 17, 2026. Red Hat tracked the issue via Bugzilla and subsequently issued multiple security errata for affected products. No notable independent researcher commentary or significant media coverage beyond routine CVE reporting was identified.