Skip to content
Threat Feed
Subscribe

Product

Ruby-Vips (< 2.2.1)

1 brief RSS
high advisory

Remote Code Execution and Arbitrary File Read in Ruby on Rails Active Storage

A vulnerability (CVE-2026-66066) in Ruby on Rails Active Storage allows unauthenticated attackers to achieve arbitrary file read and remote code execution during the variant processing phase.

PoC Active Storage +8
1c updated