Skip to content

CVE lookup

CVE-2026-66066

Pruva has a verified reproduction for CVE-2026-66066: Rails Active Storage variant processing arbitrary file read and potential RCE. The canonical evidence record is REPRO-2026-00317.

REPRO

REPRO-2026-00317

Package

rails/rails · github

Severity

CRITICAL

Status

published