Skip to main content
ExploitPublished

Ray 2.56.0 · Directory Traversal & Local File Inclusion

Source Exploit-DB RSS Feed

0
Severity
Medium

Rated by Threat Radar

Data as of 30 Sep 2026, 21:02 UTC

What to do

AI-suggested

A fix has been proposed upstream and is currently under review by the Ray maintainers. Users should monitor the Ray GitHub repository for the merged patch and apply it once available. Until the official fix is released, restrict access to the /logs API endpoint to trusted users or networks to mitigate unauthorized file access.

Description

Ray 2.56.0 - Directory Traversal & Local File Inclusion

Indicators of compromise

Exploit source code

Exploit code for Ray 2.56.0 - Directory Traversal & Local File Inclusion2,199 characters
# Exploit Title: Ray 2.56.0 - Directory Traversal & Local File Inclusion
# Date: 07/12/2026
# Google Dork: N/A
# Exploit Author: Richard Howe (rhowe425@gmail.com)
# Vendor Homepage: https://github.com/ray-project/ray
# Software Link: https://github.com/ray-project/ray
# Version: 2.56.0
# Tested on: Ubuntu 22.04 and RHEL 10.0
# CVE: Pending CNA assignment


A fix has been proposed upstream and is currently under review by the
Ray maintainers.
GH Issue: https://github.com/ray-project/ray/issues/45…

References

Community reviews

Loading reviews…