CVE-2026-126071

A flaw was found in the Active Storage component of Ruby on Rails. When files are served using proxy streaming, an error from the underlying cloud storage service partway through a download fails to properly close the streaming buffer. As a result, the server thread handling the request remains...