{"uuid": "f6f2196c-c1d9-43be-a579-6448698779e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66066", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mrzsf5efi72o", "content": "\ud83e\udd16 CVE-2026-66066: arbitrary file read in Rails Active Storage via crafted image upload (libvips) \u2014 leaks secret_key_base and cloud creds, RCE potential. Fix: libvips >=8.13.\nhttps://www.bleepingcomputer.com/news/security/rails-patches-critical-active-storage-flaw-with-rce-potential/", "creation_timestamp": "2026-08-01T15:37:46.868847Z"}