CVE-2026-122006

The activestorage gem (versions before 8.1.4.1 ) for Ruby on Rails is vulnerable to unauthorized server read and write operations during ImageMagick attachment processing. The root cause is the execution of the ImageMagick analyzer upon file attachment without a security policy to block unintende...