Technical blog on CVE-2026-66066. Notes EOL 7.1/7.0/6.x lines lack OSS fixes. Default variant_processor = :vips since Rails 7.0 load_defaults. Escalation path via exposed secrets to RCE/lateral movement. Independent reporters Ethiack and Flatt.
Technical blog on CVE-2026-66066. Notes EOL 7.1/7.0/6.x lines lack OSS fixes. Default variant_processor = :vips since Rails 7.0 load_defaults. Escalation path via exposed secrets to RCE/lateral movement. Independent reporters Ethiack and Flatt.