Skip to content
Threat Feed
Subscribe

Product

Ruby on Rails Active Storage (8.1.0 <= 8.1.3)

1 brief RSS
high advisory

Remote Code Execution and Arbitrary File Read in Ruby on Rails Active Storage

A vulnerability (CVE-2026-66066) in Ruby on Rails Active Storage allows unauthenticated attackers to achieve arbitrary file read and remote code execution during the variant processing phase.

PoC Active Storage +8
1c updated