{"uuid": "03d5c9db-0503-4ea9-96a2-731fba0b68d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66066", "type": "seen", "source": "https://bsky.app/profile/0xacb.bsky.social/post/3msktassqwk23", "content": "libvips has flagged matload as untrusted for years and exposes a switch to block it. Rails\u2019 ActiveStorage just never flipped it. Until last week.\n\nThat\u2019s CVE-2026-66066: a .mat file declared as image/png, arbitrary file read, then RCE.\n\nFull chain\ud83d\udc47\n\nethiack.com/info-hub/res...", "creation_timestamp": "2026-08-08T10:08:34.817341Z"}