{"uuid": "83314020-e8c4-4d62-be91-9409c09525da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66066", "type": "seen", "source": "https://bsky.app/profile/levelbrook.bsky.social/post/3muudqjl7k22z", "content": "CVE-2026-66066 is being probed in the wild. Active Storage + libvips, CVSS 9.5, arbitrary file read.\n\nTriage:\n\u2022 bundle list | grep -E \"activestorage|ruby-vips\"\n\u2022 patched: 7.2.3.2 / 8.0.5.1 / 8.1.3.1\n\u2022 can\u2019t deploy today? Vips.block_untrusted(true) in an initializer\n\n#RubyOnRails #Rails", "creation_timestamp": "2026-09-06T15:47:59.090086Z"}