{"schemaVersion":3,"id":"CVE-2026-66066","aliases":["UBUNTU-CVE-2026-66066","DEBIAN-CVE-2026-66066","CGA-22cc-pwvw-h3c8","CGA-2pf3-vv7h-833c","CGA-56x5-p9mq-5f39","CGA-6pmg-2hrw-66gj","CGA-74gc-7c86-wqmv","CGA-7vm8-w2jc-8f65","CGA-7wjw-6wff-f3wr","CGA-86w5-fwc8-c5fj","CGA-86wx-8jgv-phf4","CGA-8cpx-28h3-7fq4","CGA-99c4-w5xf-rph2","CGA-9hqf-crmh-cpr6","CGA-9p5p-2fpj-vxm4","CGA-9q3p-q5hj-gg5q","CGA-9xxq-m2qc-x8h5","CGA-cfqp-3292-h39g","CGA-fr37-6fr2-f544","CGA-gf8h-gx89-3qq7","CGA-hqp8-w2r8-cvh9","CGA-hr35-j6pr-9cj6","CGA-hx6q-hrr5-49pw","CGA-j2pv-5x9q-wfjj","CGA-jpwf-w8wf-r34r","CGA-jwvx-5phw-5xwh","CGA-m558-jv58-p859","CGA-mgxg-g79g-38c9","CGA-mppm-vc46-xh39","CGA-p2w3-8rqh-x636","CGA-p8j6-9x32-q745","GHSA-xr9x-r78c-5hrm","CGA-qh7g-9qpr-pc78","CGA-qp7r-mjhm-99xc","CGA-r6vq-qrc7-g75v","CGA-v2h6-hxv8-5vfv","CGA-v552-6p8m-4gj9","CGA-vj2g-m7hf-vj65","CGA-w32p-3m4q-72j5","CGA-wgpf-xx7m-8jrp","CGA-wr45-vhvq-ccrx"],"status":"published","duplicateOf":null,"title":null,"description":"Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted upload to invoke such an operation. Consuming applications are affected when configured to use libvips and accept image uploads from untrusted users. An unauthenticated attacker may exploit this behavior to read arbitrary files accessible to the Rails process, including environment variables and application secrets. Exposure of credentials such as secret_key_base or external-service tokens may enable remote code execution or lateral movement. This issue has been fixed in versions 7.2.3.2, 8.0.5.1 and 8.1.3.1.","dates":{"published":"2026-07-30T18:32:11.419Z","modified":"2026-08-05T13:46:21.375Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.5,"severity":"critical","version":"4.0","versionLabel":"v4.0","source":"CVE.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":9.5,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Ubuntu","score":9.5,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Debian","score":9.5,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Chainguard","score":9.5,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Rubygems","score":9.5,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":9.5,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.27861,"percentile":0.98094,"severity":"high","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.27861},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02099,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02099,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02099,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02099,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02099,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02099,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02099,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02099,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02099,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02099,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02099,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02099,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02099,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02099,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.27861,"percentile":0.98094}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02099,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02099,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02099,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02099,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02099,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02099,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02099,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02099,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02099,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02099,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02099,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02099,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02099,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02099,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.27861,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.27861,"percentile":0.98094}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"GITHUB_RAILS_RAILS-FORENSICS-CVE-2026-66066","name":"Rails Forensics Cve 2026 66066","source":"github","url":"https://github.com/rails/rails-forensics-CVE-2026-66066","maturity":"poc","reliabilityScore":0.3,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"MSF_EXPLOIT_MULTI_HTTP_RAILS_ACTIVESTORAGE_VIPS_RCE","name":"Ruby on Rails Active Storage Vips Arbitrary File Read and Remote Code Execution","source":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploit/multi/http/rails_activestorage_vips_rce.rb","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":"remote","platforms":[],"requiresAuth":false,"exploitdb":null,"metasploit":{"fullname":"exploit/multi/http/rails_activestorage_vips_rce","rank":"300","rankName":"normal","postAuth":false,"check":true,"stability":["service-resource-loss"],"sideEffects":["artifacts-on-disk","ioc-in-logs"],"reliability":["repeatable-session"]}}],"exploitCount":2,"weaknesses":[{"id":"CWE-1188","name":"Initialization of a Resource with an Insecure Default","description":"The product initializes or sets a resource with a default that is intended to be changed by the product's installer, administrator, or maintainer, but the default is not secure.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/1188.html"}],"affected":[{"vendor":"chainguard","product":"gitlab-rails-ce-18.1","name":"gitlab-rails-ce-18.1","label":"gitlab-rails-ce-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.10","name":"gitlab-rails-ce-18.10","label":"gitlab-rails-ce-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.10","purlType":"apk","versions":[{"text":"< 18.10.8-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.10.8-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.11","name":"gitlab-rails-ce-18.11","label":"gitlab-rails-ce-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.11","purlType":"apk","versions":[{"text":"< 18.11.8-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.11.8-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.6","name":"gitlab-rails-ce-18.6","label":"gitlab-rails-ce-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.7","name":"gitlab-rails-ce-18.7","label":"gitlab-rails-ce-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.8","name":"gitlab-rails-ce-18.8","label":"gitlab-rails-ce-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.8","purlType":"apk","versions":[{"text":"< 18.8.11-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.8.11-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.9","name":"gitlab-rails-ce-18.9","label":"gitlab-rails-ce-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.9","purlType":"apk","versions":[{"text":"< 18.9.8-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.9.8-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.0","name":"gitlab-rails-ce-19.0","label":"gitlab-rails-ce-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.0","purlType":"apk","versions":[{"text":"< 19.0.5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.0.5-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.1","name":"gitlab-rails-ce-fips-18.1","label":"gitlab-rails-ce-fips-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.10","name":"gitlab-rails-ce-fips-18.10","label":"gitlab-rails-ce-fips-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.10","purlType":"apk","versions":[{"text":"< 18.10.8-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.10.8-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.11","name":"gitlab-rails-ce-fips-18.11","label":"gitlab-rails-ce-fips-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.11","purlType":"apk","versions":[{"text":"< 18.11.8-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.11.8-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.6","name":"gitlab-rails-ce-fips-18.6","label":"gitlab-rails-ce-fips-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.7","name":"gitlab-rails-ce-fips-18.7","label":"gitlab-rails-ce-fips-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.8","name":"gitlab-rails-ce-fips-18.8","label":"gitlab-rails-ce-fips-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.0","name":"gitlab-rails-ce-fips-19.0","label":"gitlab-rails-ce-fips-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.0","purlType":"apk","versions":[{"text":"< 19.0.4-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.0.4-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.2","name":"gitlab-rails-ce-fips-19.2","label":"gitlab-rails-ce-fips-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.2","purlType":"apk","versions":[{"text":"< 19.2.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"pghero","name":"pghero","label":"pghero","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/pghero","purlType":"apk","versions":[{"text":"< 3.8.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"pghero-fips","name":"pghero-fips","label":"pghero-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/pghero-fips","purlType":"apk","versions":[{"text":"< 3.8.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.3-rails-8.0","name":"ruby3.3-rails-8.0","label":"ruby3.3-rails-8.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.3-rails-8.0","purlType":"apk","versions":[{"text":"< 8.0.5.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.5.1-r0","eol":null,"hubHref":null},{"vendor":"debian","product":"rails","name":"rails","label":"rails","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/rails","purlType":"deb","versions":[{"text":"< 2:6.1.7.10+dfsg-1~deb12u3","noFixRecorded":false,"fixedIn":null},{"text":"< 2:7.2.2.2+dfsg-2~deb13u2","noFixRecorded":false,"fixedIn":null},{"text":"< 2:7.2.3.2+dfsg-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2:6.1.7.10+dfsg-1~deb12u3 | < 2:7.2.2.2+dfsg-2~deb13u2 | < 2:7.2.3.2+dfsg-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"rails","name":"rails","label":"rails","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/rails","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"RubyGems","product":"activestorage","name":"activestorage","label":"activestorage","ecosystem":"RubyGems","cpePart":null,"purl":"pkg:gem/activestorage","purlType":"gem","versions":[{"text":"< 7.2.3.2","noFixRecorded":false,"fixedIn":null},{"text":"≥ 8.0.0.beta1, < 8.0.5.1","noFixRecorded":false,"fixedIn":null},{"text":"≥ 8.1.0.beta1, < 8.1.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.2.3.2 | ≥ 8.0.0.beta1, < 8.0.5.1 | ≥ 8.1.0.beta1, < 8.1.3.1","eol":null,"hubHref":null},{"vendor":"rails","product":"rails","name":"rails","label":"rails","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 7.2.3.2","noFixRecorded":false,"fixedIn":null},{"text":"≥ 8.0.0.beta1, < 8.0.5.1","noFixRecorded":false,"fixedIn":null},{"text":"≥ 8.1.0.beta1, < 8.1.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.2.3.2 | ≥ 8.0.0.beta1, < 8.0.5.1 | ≥ 8.1.0.beta1, < 8.1.3.1","eol":null,"hubHref":"/vendor/rails/rails"}],"affectedCount":23,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/rails/rails/security/advisories/GHSA-xr9x-r78c-5hrm","label":"github.com/rails/rails/security/advisories/GHSA-xr9x-r78c-5hrm","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB"]},{"url":"https://github.com/rails/rails/commit/1c01bb587206ee6eb0e1179c2cef96a6a47acb1e","label":"github.com/rails/rails/commit/1c01bb587206ee6eb0e1179c2cef96a6a47acb1e","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB"]},{"url":"https://github.com/rails/rails/commit/349e7a5d5b4b715af1e416db824f3c078a7d59e5","label":"github.com/rails/rails/commit/349e7a5d5b4b715af1e416db824f3c078a7d59e5","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB"]},{"url":"https://github.com/rails/rails/commit/d79b7f4aa17dec8ce4960fef05733c8c0c7ef49a","label":"github.com/rails/rails/commit/d79b7f4aa17dec8ce4960fef05733c8c0c7ef49a","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB"]},{"url":"https://github.com/rails/rails/releases/tag/v7.2.3.2","label":"github.com/rails/rails/releases/tag/v7.2.3.2","hostname":"github.com","tags":["X Refsource MISC","WEB"]},{"url":"https://github.com/rails/rails/releases/tag/v8.0.5.1","label":"github.com/rails/rails/releases/tag/v8.0.5.1","hostname":"github.com","tags":["X Refsource MISC","WEB"]},{"url":"https://github.com/rails/rails/releases/tag/v8.1.3.1","label":"github.com/rails/rails/releases/tag/v8.1.3.1","hostname":"github.com","tags":["X Refsource MISC","WEB"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activestorage/CVE-2026-66066.yml","label":"github.com/rubysec/ruby-advisory-db/blob/master/gems/activestorage/CVE-2026-66066.yml","hostname":"github.com","tags":["X Refsource MISC","Advisory","WEB"]},{"url":"https://thehackernews.com/2026/07/critical-rails-flaw-could-let.html","label":"thehackernews.com/2026/07/critical-rails-flaw-could-let.html","hostname":"thehackernews.com","tags":["X Refsource MISC","WEB"]},{"url":"http://www.openwall.com/lists/oss-security/2026/07/29/9","label":"www.openwall.com/lists/oss-security/2026/07/29/9","hostname":"www.openwall.com","tags":["WEB"]},{"url":"https://ethiack.com/info-hub/research/kindarails2shell-rails-rce-cve-2026-66066","label":"ethiack.com/info-hub/research/kindarails2shell-rails-rce-cve-2026-66066","hostname":"ethiack.com","tags":["WEB"]},{"url":"http://www.openwall.com/lists/oss-security/2026/08/01/6","label":"www.openwall.com/lists/oss-security/2026/08/01/6","hostname":"www.openwall.com","tags":["WEB"]},{"url":"https://github.com/rails/rails-forensics-CVE-2026-66066","label":"github.com/rails/rails-forensics-CVE-2026-66066","hostname":"github.com","tags":["Exploit","EVIDENCE"]},{"url":"https://ubuntu.com/security/CVE-2026-66066","label":"ubuntu.com/security/CVE-2026-66066","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-66066","label":"www.cve.org/CVERecord?id=CVE-2026-66066","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-66066","label":"security-tracker.debian.org/tracker/CVE-2026-66066","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/66xxx/CVE-2026-66066.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/66xxx/CVE-2026-66066.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66066","label":"nvd.nist.gov/vuln/detail/CVE-2026-66066","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/rails/rails","label":"github.com/rails/rails","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://www.cve.org/CVERecord/SearchResults?query=CVE-2026-66066","label":"www.cve.org/CVERecord/SearchResults?query=CVE-2026-66066","hostname":"www.cve.org","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2026:12153-1","OPENSUSE-SU-2026:22068-1"],"duplicates":[],"related":["CGA-VM96-FMV3-9RJ2","OPENSUSE-SU-2026:12153-1","OPENSUSE-SU-2026:22068-1"]},"timeline":[{"kind":"published","date":"2026-07-30T18:32:11.419Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-08-05T13:46:21.375Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T14:59:35.052Z","stale":false,"partial":false}}