CloudThe Hacker Newsabout 2 hours ago
Critical Rails Flaw Exposes Server Secrets via Image Uploads
1 min read
A critical Active Storage vulnerability tracked as CVE-2026-66066 with a CVSS score of 9.5 lets unauthenticated attackers read arbitrary server files through crafted image uploads. The flaw exposes secrets including secret_key_base, database passwords, and cloud storage credentials, potentially enabling remote code execution.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
