Skip to content
Threat Feed
Subscribe

Product

Ruby on Rails Active Storage (7.0.0 <= 7.2.3.1)

1 brief RSS
high advisory

Remote Code Execution and Arbitrary File Read in Ruby on Rails Active Storage

A vulnerability (CVE-2026-66066) in Ruby on Rails Active Storage allows unauthenticated attackers to achieve arbitrary file read and remote code execution during the variant processing phase.

PoC Active Storage +8
1c updated