Cybersecurity
Critical Vulnerability in Ruby on Rails Active Storage Allows Remote Code Execution
Ruby on Rails has patched critical vulnerability CVE-2026-66066 in its Active Storage component, with a CVSS score of 9.5. This flaw allowed unauthenticated attackers to read arbitrary files and escalate to potential remote code execution (RCE) in Rails applications, impacting image processing.
Carlos "Emérito" López Lovera
