Security Information for Ruby on Rails' Active Storage

Posted at Friday, July 31, 2026

Ruby on Rails' Active Storage contains a severe vulnerability that could lead to arbitrary code execution (CVE-2026-66066). If this product is in use, please update to the latest version immediately.

References

KindaRails2Shell - Critical RCE in Rails via Active Storage (CVE-2026-66066) (https://ethiack.com/info-hub/research/kindarails2shell-rails-rce-cve-2026-66066)