---
id: 5702
title: "[CVE-2026-66066] KindaRails2Shell: How a MATLAB file reads your secrets and pops a shell on Rails"
cve: CVE-2026-66066
source_domain: ethiack.com
source_url: "https://ethiack.com/info-hub/research/kindarails2shell-how-a-matlab-file-reads-your-secrets-and-pops-a-shell-on-ruby-on-rails"
tags: ["rce", "ruby-on-rails", "libvips", "file-read", "cve-2026-66066"]
phying_url: "https://phying.com/item/5702"
lang: en
---

# [CVE-2026-66066] KindaRails2Shell: How a MATLAB file reads your secrets and pops a shell on Rails

## Summary

A technical deep-dive into CVE-2026-66066, where a malformed MATLAB file slips past libvips handling in Rails ActiveStorage to achieve arbitrary file read and unauthenticated RCE on default setups.

## Intelligence Metadata

- **Sources:** ethiack.com
- **CVE:** CVE-2026-66066
- **Original:** https://ethiack.com/info-hub/research/kindarails2shell-how-a-matlab-file-reads-your-secrets-and-pops-a-shell-on-ruby-on-rails
- **Phying News:** https://phying.com/item/5702