active-storage

Live2

1. live
   Ruby on Rails Active Storage Ruby on Rails Vulnerable to Arbitrary File Read and Write in Active Storage

   Patch now · Disclosed · since 4 Nov 2026

   An ImageMagick integration flaw in Ruby on Rails Active Storage allows attackers to write and read arbitrary files. This could enable threat actors to gain unauthorized file access and move laterally.

   Do:Check for vendor updates and apply patches for Ruby on Rails Active Storage.
2. live
   Ruby on Rails Ruby on Rails Active Storage Flaw Allows Arbitrary File Writes

   Patch now · Disclosed · ●Patched · since 4 Nov 2026

   A critical vulnerability in Ruby on Rails Active Storage lets unauthenticated attackers write files to the server using crafted ImageMagick uploads. The project released versions 8.1.4.1 and 8.0.5.2 to address the issue.

   Do:Update to Ruby on Rails 8.1.4.1 or 8.0.5.2.

Earlier0

Nothing closed yet.