CVE lookup
CVE-2026-66066
Pruva has a verified reproduction for CVE-2026-66066: Rails Active Storage variant processing arbitrary file read and potential RCE. The canonical evidence record is REPRO-2026-00317.
REPRO
REPRO-2026-00317
Package
rails/rails · github
Severity
CRITICAL
Status
published