THREATOPS

THREAT OPS › Threat News › Rails security advisory (AV26-767)

Rails security advisory (AV26-767)

highcccs_caPublished 2026-07-31

<article data-history-node-id="8061" about="/en/alerts-advisories/rails-security-advisory-av26-767" class="cccs-threats full clearfix">

<div class="content"> <div class="layout layout--onecol"> <div class="layout__region layout__region--content">

<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-fiel

Indicators of compromise

CVE-2026-66066cve
https://discuss.rubyonrails.org/t/cve-2026-66066-possible-arbitrary-file-read-and-remote-code-execution-in-active-storage-variant-processing/91432url
8.0.5.1ipv4
8.1.3.1ipv4
7.2.3.2ipv4

Original source: https://cyber.gc.ca/en/alerts-advisories/rails-security-advisory-av26-767