{"uuid": "0686ca02-5ae6-4c9a-ad15-bab6e9a69949", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66066", "type": "seen", "source": "https://bsky.app/profile/ethiack.com/post/3mrtaldovvc25", "content": "\ud83d\udea8 We discovered a critical RCE in Ruby on Rails via Active Storage.\nKindaRails2Shell - discovered by the Ethiack research team.\n\nAny app using Active Storage with the default vips processor and accepting image uploads from untrusted users is affected.\n\nCVE-2026-66066\n\nethiack.com/info-hub/res...", "creation_timestamp": "2026-07-30T01:03:11.651230Z"}