HIGH7.5
PYSEC-2026-130
Quick fix
PYSEC-2026-130 — ray: upgrade to the fixed version with the command below.
pip install --upgrade 'ray>=2.8.1'Details
A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied paths in the static file handling mechanism, an attacker can use traversal sequences (e.g., ../) to access files outside the intended static directory, resulting in local file disclosure.
Are you affected?
Enter the version of the package you're using.