#ActiveStorage is an active hashtag on Bluesky. In the last 30 days, 7 people shared 8 posts with it — around 0 a day. The busiest day was Nov 4 with 6 posts.
www.driftingruby.com
Episode 588 - RustFS | Drifting Ruby
MinIO has been archived and hasn't been updated in 9 months. A new solution is needed so in this episode, we look at a different mechanism for using an S3 compatible service within our development env...
securityonline.info
Rails 8.0.5.2 and 8.1.4.1 Fix 21 Security Flaws, Including Critical Active Storage File Write Bug
TL;DR The Ruby on Rails team released versions 8.0.5.2 and 8.1.4.1 on November 4, 2026, fixing 21 security issues. This Rails security update covers file read, file write and possible remote code execution in Active Storage. It also fixes a Strong Parameters bypass, IP spoofing, several XSS bugs and multiple denial-of-service flaws. The worst bug is rated critical at CVSS 9.8.
gazewire.com
🔐 Critical Rails Active Storage Flaw Enables Arbitrary Server File Writes
A newly disclosed vulnerability in Ruby on Rails' Active Storage permits an attacker to upload a crafted image and cause the server to…
chuiho.net
Rails Active Storage に重大な欠陥 画像のアップロードでファイルを書き込まれうる
Ruby on Rails の activestorage で、ImageMagick（mini_magick）で画像を扱うアプリが、ログインなしのアップロードでサーバーにファイルを書き込まれうる。CVSS 9.8。8.1.4.1・8.0.5.2 で修正。
stackflag.com
CVE-2026-122006: Rails ActiveStorage lets attackers read secret key via ImageMagick
The ActiveStorage component in Ruby on Rails versions before 8.1.4.1 runs ImageMagick when a file is attached.
cyberveille.ch
CVE-2026-66066 : exploitation d'une RCE ActiveStorage (Rails) quelques heures après le patch
Cet article est un post-mortem détaillé d'un incident de sécurité impliquant la CVE-2026-66066 (alias KindaRails2Shell), une vulnérabilité de type exécution de code à distance (RCE) avec un score CVSS 9.5/10 affectant le composant ActiveStorage de Ruby on Rails 8 et versions ultérieures. 21 juillet 2026 : Découverte initiale par des chercheurs légitimes (Ethiack, dont André Baptista alias 0xacb).
stackflag.com
CVE-2026-66066: Active Storage can leak sensitive files and run malicious code
A vulnerability in Active Storage can allow an attacker to read sensitive files and potentially run malicious code on your server.
www.panasiti.me
Building Modular Rails Applications: A Deep Dive into Rails Engines Through Active Storage Dashboard | Giovanni Panasiti - Personal Website and Blog
I’ve been building Rails applications for the last 10 years on a daily base and almost all of them use active storage now. Users are uploading files and then...
www.driftingruby.com
Episode 588 - RustFS | Drifting Ruby
MinIO has been archived and hasn't been updated in 9 months. A new solution is needed so in this episode, we look at a different mechanism for using an S3 compatible service within our development env...
gazewire.com
🔐 Critical Rails Active Storage Flaw Enables Arbitrary Server File Writes
A newly disclosed vulnerability in Ruby on Rails' Active Storage permits an attacker to upload a crafted image and cause the server to…
chuiho.net
Rails Active Storage に重大な欠陥 画像のアップロードでファイルを書き込まれうる
Ruby on Rails の activestorage で、ImageMagick（mini_magick）で画像を扱うアプリが、ログインなしのアップロードでサーバーにファイルを書き込まれうる。CVSS 9.8。8.1.4.1・8.0.5.2 で修正。
stackflag.com
CVE-2026-122006: Rails ActiveStorage lets attackers read secret key via ImageMagick
The ActiveStorage component in Ruby on Rails versions before 8.1.4.1 runs ImageMagick when a file is attached.
securityonline.info
Rails 8.0.5.2 and 8.1.4.1 Fix 21 Security Flaws, Including Critical Active Storage File Write Bug
TL;DR The Ruby on Rails team released versions 8.0.5.2 and 8.1.4.1 on November 4, 2026, fixing 21 security issues. This Rails security update covers file read, file write and possible remote code execution in Active Storage. It also fixes a Strong Parameters bypass, IP spoofing, several XSS bugs and multiple denial-of-service flaws. The worst bug is rated critical at CVSS 9.8.
cyberveille.ch
CVE-2026-66066 : exploitation d'une RCE ActiveStorage (Rails) quelques heures après le patch
Cet article est un post-mortem détaillé d'un incident de sécurité impliquant la CVE-2026-66066 (alias KindaRails2Shell), une vulnérabilité de type exécution de code à distance (RCE) avec un score CVSS 9.5/10 affectant le composant ActiveStorage de Ruby on Rails 8 et versions ultérieures. 21 juillet 2026 : Découverte initiale par des chercheurs légitimes (Ethiack, dont André Baptista alias 0xacb).
cyberveille.ch
CVE-2026-66066 : faille critique dans Rails Active Storage avec potentiel RCE
📰 Source : BleepingComputer — publié le 1er août 2026 🔍 Contexte Les mainteneurs de Ruby on Rails ont publié un avis de sécurité concernant CVE-2026-66066, une vulnérabilité critique affectant le composant Active Storage, utilisé pour la gestion des uploads de fichiers et pièces jointes dans les applications Rails.
cybernewsroom.xyz
Metasploit Exploit Targets Critical Ruby on Rails Active Storage RCE Flaw
Metasploit exploit targets critical Ruby on Rails Active Storage RCE flaw. Organizations must assess and respond to the potential vulnerabilities now.
Posts are pulled live from Bluesky and cached briefly. Posts with content labels are hidden.