CVE-2026-126188

Active Storage in Rails versions prior to 8.0.5.2 and between 8.1 and 8.1.4.1 is vulnerable to local file disclosure . The issue exists in ActiveStorage::Previewer::VideoPreviewer, ActiveStorage::Analyzer::VideoAnalyzer, and ActiveStorage::Analyzer::AudioAnalyzer because they pass uploaded blob c...

PT-2026-144859

Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record objects. Prior to 8.0.5.2 and from 8.1 until 8.1.4.1, Active Storage's ActiveStorage::Previewer::VideoPreviewer, ActiveStorage::Analyzer::VideoAnalyzer, and...