Definition
Active Storage is the ruby-on-rails framework for file uploads and variant processing. Since Rails 7.0 defaults, image variants use libvips (variant_processor = :vips).
Key Points
- 2026-07-29: cve-2026-66066 — failure to disable libvips unfuzzed operations enables arbitrary file read from crafted uploads
- Affected apps: vips processor + untrusted image uploads
- Magick processor not affected via this vector (per Rapid7)