Exploit for CVE-2026-66066

KindaRails2Shell: CVE-2026-66066 A zero-dependency, single-fi...

Ruby on Rails Active Storage CVE-2026-66066 Detection Tool

A safe detection tool for identifying Ruby on Rails Active Storage deployments that may be affected by the CVE-2026-66066 vulnerability. The utility performs non-invasive fingerprinting by checking for Rails and Active Storage indicators, exposed endpoints, and version information without...

Exploit for CVE-2026-66066

rails-forensics-CVE-2026-66066 Tooling and method for answeri...

CVE-2026-66066

Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted upload to invoke such an operation. Consuming applications are...

KindaRails2Shell: CVE-2026-66066, Critical Arbitrary File Read and Possible Remote Code Execution in Ruby on Rails

Overview On July 29, 2026, the Ruby on Rails project published a security advisory for CVE-2026-66066, a critical vulnerability affecting Active Storage image processing when used in conjunction with the libvips image processing library. The vulnerability has a CVSSv4 score of 9.5 and is classifi...

libvips Code Execution

The vulnerability of the libvips image processing library, a component of the Active Storage framework in the Ruby on Rails software platform, relates to insecure resource initialization. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely and gain unauthorize...

Exploit for CVE-2026-66066

🚨 CVE-2026-66066 — KindaRails2Shell Pre-Authenticatio...

GHSA-PP92-CRG2-GFV9 vulnerabilities

Vulnerabilities for packages: ruby3.4-oauth2, ruby3.3-oauth2, gitlab-rails-ce, ruby3.2-oauth2, gitlab-rails-ce-fips, ruby4.0-oauth2...

CVE-2026-54603 vulnerabilities

Vulnerabilities for packages: ruby3.4-oauth2, ruby3.3-oauth2, gitlab-rails-ce, ruby3.2-oauth2, gitlab-rails-ce-fips, ruby4.0-oauth2...

Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads

Ruby on Rails has released fixes for a critical Active Storage vulnerability that could let unauthenticated attackers read arbitrary files from application servers through crafted image uploads. Tracked as CVE-2026-66066 CVSS score: 9.5, the flaw can expose the Rails process environment and secre...

Exploit for CVE-2026-66066

rails-activestorage-vips-audit An Agent Skillhttps://agent...

PT-2026-65864

Name of the Vulnerable Software and Affected Versions activestorage versions prior to 7.2.3.2 activestorage versions 8.0 through 8.0.5 activestorage versions 8.1 through 8.1.3 Description Active Storage fails to disable libvips operations marked as unsafe for untrusted content. This allows an...

Possible arbitrary file read and remote code execution in Active Storage variant processing

Impact In its default configuration, a Rails application that displays image variants may allow an unauthenticated attacker to read arbitrary files from the server, including the process environment. That environment typically holds secretkeybase and often credentials for external systems, which...

GHSA-395F-4HP3-45GV vulnerabilities

Vulnerabilities for packages: argo-workflows, gemini-cli, arangodb, gitlab-rails-ce, code-server, gitlab-rails-ce-fips...

CVE-2026-13311 vulnerabilities

Vulnerabilities for packages: argo-workflows, gemini-cli, arangodb, gitlab-rails-ce, code-server, gitlab-rails-ce-fips...

Ruby on Rails Secret Token Disclosure Detection

Ruby on Rals Secret Token file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby on Rals Secret Token file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ruby on Rails Secret Token Disclosure...

Ruby on Rails - Accept Header LFI Detection (CVE-2019-5418)

Detects CVE-2019-5418 by sending Accept: ../../../../../../../../etc/passwd and looking for passwd contents in the response. !/usr/bin/env python3 -- coding: utf-8 -- """Rails File Content Disclosure via Accept header CVE-2019-5418.""" import re from kittysploit import from...

Ruby on Rails secrets.yml File Exposure Detection

Ruby on Rails internal secret file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby on Rails internal secret file is exposed.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ruby on Rails...

Ruby on Rails Database Configuration File - Detect

Ruby on Rails database configuration file was detected, which may contain database credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby on Rails database configuration file was detected, which may contain database credentials.""" from kittysploit import from lib.protocols.http.httpclien...

Rakefile - File Disclosure Detection

Rakefile configuration file was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Rakefile configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Rakefile - File Disclosure Detection',...