Tag
#Ruby on Rails
Rails Active Storage RCE, Fixed in 8.1.4.1 (GHSA-f3w6-w445-fwh9)
Rails Active Storage before 8.0.5.2 and 8.1.4.1 lets crafted uploads make ImageMagick or FFmpeg write or read server files, possibly leading to RCE; update now.
Nov 04, 2026