{"uuid": "0ae1b461-ebdd-434c-bc90-3fe2b437b789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66066", "type": "seen", "source": "https://bsky.app/profile/hatena-bookmark.bsky.social/post/3mrscsavzuf2k", "content": "#\ud83d\udd16\u30c6\u30af\u30ce\u30ed\u30b8\u30fc\n\u6df1\u523b\u5ea6\u300c\u7dca\u6025\u300d\u306eRails\u8106\u5f31\u6027\u300cKindaRails2Shell\u300d\uff08CVE-2026-66066\uff09\u306e\u6982\u8981\u3068\u5bfe\u5fdc\u6307\u91dd - GMO Flatt Security Blog\n\n2026\u5e747\u670829\u65e5\u3001\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u305b\u305a\u3001\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u4efb\u610f\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09\u306b\u3064\u306a\u304c\u308a\u5f97\u308b\u8106\u5f31\u6027\u300cCVE-2026-66066\u300d\u3092\u4fee\u6b63\u3057\u305fRuby on Rails 7.2.3.2\u30018.0.5.1\u30018.1.3.1\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\uff08\u53c2\u8003\uff1aPossible arbitrary file read and remote code execution in Active Storage variant proc", "creation_timestamp": "2026-07-29T16:10:09.317478Z"}