Critical Rails Active Storage Flaw Enables Arbitrary File Writes via ImageMagick Uploads
RedSide Security November 04, 2026 Vulnerability 6 views
A critical Active Storage flaw in Ruby on Rails can let unauthenticated attackers write arbitrary files to a server when uploads are processed with ImageMagick. Patched versions 8.1.4.1 and 8.0.5.2 are available.
Continue reading: Critical Rails Active Storage Flaw Enables Arbitra…