As cited
Copy frozen at (site build).
vulnerabilities
Rubyonrails security advisory (AV26-1129)
Ruby on Rails Active Storage versions prior to 8.0.5.2 and 8.1.4.1 contain a vulnerability that may allow arbitrary file write and read operations during image analysis. The Cyber Centre issued advisory AV26-1129 on November 5, 2026, and recommends affected users apply the patched versions.
Why it matters: Organizations running Ruby on Rails with Active Storage in versions 8.0.x or 8.1.x before the patched releases should upgrade immediately to prevent attackers from reading or writing arbitrary files on affected systems.
- Source published
- First seen by Cybersecurity Tracker