KindaRails2Shell

Definition

Industry nickname (Ethiack / Flatt / Rapid7) for the cve-2026-66066 Rails Active Storage + libvips arbitrary-file-read chain that can escalate toward shell/RCE via leaked secrets.

Related

• cve-2026-66066
• ruby-on-rails
• application-security

Sources

• 2026-08-01-rapid7-kindarails2shell-cve-2026-66066