#rails

• 

  KindaRails2Shell: a Critical RCE Vulnerability in Rails via Active Storage

  30.07.2026 18:02 · Security · 💬 0

  Ethiack researchers have disclosed CVE-2026-66066 in standard Ruby on Rails applications that use Active Storage with the vips processor. It allows arbitrary file reads and remote code execution.