CVE-2026-66066 — KindaRails2Shell: Rails Active Storage/libvips Arbitrary File Read → RCE. MATLAB/HDF5 dual-identity file → SECRET_KEY_BASE theft → forged variation. CVSS 9.5 | Rails < 8.1.3.1
ruby rails security exploit libvips poc rce vulnerability infosec cve pentest activestorage file-read pre-auth cve-2026-66066 kindarails2shell kr2s
-
Updated
Aug 4, 2026 - Python