KindaRails2Shell: When an Image Upload Reads Your Secrets
CVE-2026-66066 turns untrusted image uploads into file reads in Rails Active Storage. Check exposure, patch correctly, and rotate what leaked.
Secure Development
1 article
1 article
CVE-2026-66066 turns untrusted image uploads into file reads in Rails Active Storage. Check exposure, patch correctly, and rotate what leaked.