Ruby on Rails has patched CVE-2026-66066, a critical vulnerability leading to unauthenticated file reads and potentially RCE.
A critical vulnerability in the Active Storage framework can allow an unauthenticated attacker to read arbitrary files from a ...