{"uuid": "dc303b21-fdb0-49db-8d79-37c68a49cdfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66066", "type": "seen", "source": "https://bsky.app/profile/raul.mastodon.in4matics.cat.ap.brid.gy/post/3mru7jc6fx7f2", "content": "CVE-2026-66066: un atacant pot llegir fitxers del servidor Rails gr\u00e0cies a Active Storage + libvips. secret_key_base, master.key, credencials de cloud \u2014 tot a l'abast. I despr\u00e9s fer RCE amb les claus robades. \ud83c\udfaf\n\nParcheja a: activestorage 7.2.3.2 / 8.0.5.1 / 8.1.3.1 o libvips \u2265 8.13.0\n\nSi encara [\u2026]", "creation_timestamp": "2026-07-30T10:16:55.920707Z"}