Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2026-66066] KindaRails2Shell: How a MATLAB file reads your secrets and pops a shell on Rails

ethiack.com | research | CVE-2026-66066 | #rce | #ruby-on-rails | #libvips | #file-read | #cve-2026-66066

Summary

A technical deep-dive into CVE-2026-66066, where a malformed MATLAB file slips past libvips handling in Rails ActiveStorage to achieve arbitrary file read and unauthenticated RCE on default setups.
Collected

original ↗

Related coverage

  1. KindaRails2Shell - Critical RCE in Rails via Active Storage (CVE-2026-66066) (ethiack.com)
  2. CVE-2026-66066 PoC: Rails Active Storage file-read-to-RCE chain (github.com)
  3. Grafana 6.4.3 Arbitrary File Read (swarm.ptsecurity.com)
  4. Vulnerabilities in the Openfire Admin Console (swarm.ptsecurity.com)
  5. ToolShell - A Critical SharePoint Vulnerability Chain under Active Exploitation (blog.viettelcybersecurity.com)
  6. Chamilo LMS... It's raining 0days, hallelujah, it's raining 0days (blog.quarkslab.com)

back