{"schema_version":1,"title":"activestorage (RubyGems) vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 19 vulnerabilities in activestorage (RubyGems): 6 in the last 7 days and 8 in the last 90 days, 4 of them critical and 0 exploited in the wild. The most recent, CVE-2026-126188, was published on 11 November 2026. 2 vulnerabilities in the last four weeks, up from none in the four before. 2 critical against 0.","url":"https://junglewise.ai/threats/technologies/activestorage","json_url":"https://junglewise.ai/threats/technologies/activestorage.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/activestorage","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":2,"all_time":19,"critical":4,"exploited":0,"last_7_days":6,"last_30_days":8,"last_90_days":8,"last_365_days":15},"latest":[{"cve":"CVE-2026-126188","cvss":3.7,"epss":0.0028,"slug":"cve-2026-126188-active-storage-makes-it-simple-to-upload-and-reference-files-in","title":"Active Storage: Possible local file disclosure in video previews and analysis","severity":"low","exploited":false,"published_at":"2026-11-11T00:18:47.267+00:00","url":"https://junglewise.ai/threats/cve-2026-126188-active-storage-makes-it-simple-to-upload-and-reference-files-in"},{"cve":"CVE-2026-126186","cvss":8.8,"slug":"cve-2026-126186-active-storage-possible-arbitrary-file-read-and-remote-code","title":"Ruby on Rails Active Storage arbitrary file read and RCE in media processing","severity":"high","exploited":false,"published_at":"2026-11-10T22:18:31.843+00:00","url":"https://junglewise.ai/threats/cve-2026-126186-active-storage-possible-arbitrary-file-read-and-remote-code"},{"cve":"CVE-2026-126085","cvss":5.3,"slug":"cve-2026-126085-active-storage-possible-circumvention-of-file-size-limits-in","title":"Ruby on Rails Active Storage content length bypass in Google Cloud Storage uploads","severity":"medium","exploited":false,"published_at":"2026-11-10T22:18:31.413+00:00","url":"https://junglewise.ai/threats/cve-2026-126085-active-storage-possible-circumvention-of-file-size-limits-in"},{"cve":"CVE-2026-126084","cvss":4.7,"epss":0.0014,"slug":"cve-2026-126084-active-storage-makes-it-simple-to-upload-and-reference-files-in","title":"Ruby on Rails Active Storage GCS signature bypass","severity":"medium","exploited":false,"published_at":"2026-11-10T21:19:27.287+00:00","url":"https://junglewise.ai/threats/cve-2026-126084-active-storage-makes-it-simple-to-upload-and-reference-files-in"},{"cve":"CVE-2026-126074","cvss":4.3,"slug":"cve-2026-126074-active-storage-makes-it-simple-to-upload-and-reference-files-in","title":"Rails Active Storage persistent DoS via NUL byte filename","severity":"medium","exploited":false,"published_at":"2026-11-10T21:19:25.72+00:00","url":"https://junglewise.ai/threats/cve-2026-126074-active-storage-makes-it-simple-to-upload-and-reference-files-in"},{"cve":"CVE-2026-126071","cvss":5.3,"slug":"cve-2026-126071-active-storage-makes-it-simple-to-upload-and-reference-files-in","title":"Ruby on Rails Active Storage denial of service via stream error handling","severity":"medium","exploited":false,"published_at":"2026-11-10T21:19:25.263+00:00","url":"https://junglewise.ai/threats/cve-2026-126071-active-storage-makes-it-simple-to-upload-and-reference-files-in"},{"cvss":9.8,"slug":"duplicate-advisory-active-storage-possible-arbitrary-file-write-and-575968b6","title":"Ruby on Rails Active Storage arbitrary file read/write via ImageMagick","severity":"critical","exploited":false,"published_at":"2026-11-04T15:32:31+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-active-storage-possible-arbitrary-file-write-and-575968b6"},{"cve":"CVE-2026-122006","cvss":9.8,"epss":0.0074,"slug":"cve-2026-122006-the-activestorage-gem-before-8-1-4-1-for-ruby-on-rails-when","title":"Ruby on Rails activestorage ImageMagick arbitrary file read/write","severity":"critical","exploited":false,"published_at":"2026-11-04T15:17:42.94+00:00","url":"https://junglewise.ai/threats/cve-2026-122006-the-activestorage-gem-before-8-1-4-1-for-ruby-on-rails-when"},{"cve":"CVE-2026-66066","cvss":4,"epss":0.021,"slug":"cve-2026-66066-ruby-on-rails-active-storage-arbitrary-file-read-via-libvips","title":"Ruby on Rails Active Storage arbitrary file read via libvips","severity":"critical","exploited":false,"published_at":"2026-07-30T19:18:35.843+00:00","url":"https://junglewise.ai/threats/cve-2026-66066-ruby-on-rails-active-storage-arbitrary-file-read-via-libvips"},{"cve":"CVE-2026-33658","cvss":3.1,"epss":0.0057,"slug":"cve-2026-33658-rails-active-storage-has-a-possible-dos-vulnerability-in-proxy","title":"Rails Active Storage has a possible DoS vulnerability in proxy mode via multi-range requests","severity":"low","exploited":false,"published_at":"2026-03-25T21:04:50+00:00","url":"https://junglewise.ai/threats/cve-2026-33658-rails-active-storage-has-a-possible-dos-vulnerability-in-proxy"},{"cve":"CVE-2026-33195","cvss":9.8,"epss":0.0072,"slug":"cve-2026-33195-ruby-on-rails-active-storage-path-traversal-in-diskservice","title":"Ruby on Rails Active Storage path traversal in DiskService","severity":"critical","exploited":false,"published_at":"2026-03-24T00:16:28.987+00:00","url":"https://junglewise.ai/threats/cve-2026-33195-ruby-on-rails-active-storage-path-traversal-in-diskservice"},{"cve":"CVE-2026-33202","cvss":4,"epss":0.0078,"slug":"cve-2026-33202-ruby-on-rails-active-storage-glob-injection-in-diskservice","title":"Ruby on Rails Active Storage glob injection in DiskService","severity":"medium","exploited":false,"published_at":"2026-03-23T21:18:56+00:00","url":"https://junglewise.ai/threats/cve-2026-33202-ruby-on-rails-active-storage-glob-injection-in-diskservice"},{"cve":"CVE-2026-33174","cvss":4,"epss":0.007,"slug":"cve-2026-33174-rails-active-storage-has-a-possible-dos-vulnerability-when-in","title":"Rails Active Storage has a possible DoS vulnerability when in proxy mode via Range requests","severity":"medium","exploited":false,"published_at":"2026-03-23T21:08:54+00:00","url":"https://junglewise.ai/threats/cve-2026-33174-rails-active-storage-has-a-possible-dos-vulnerability-when-in"},{"cve":"CVE-2026-33173","cvss":4,"epss":0.0043,"slug":"cve-2026-33173-rails-active-storage-has-possible-content-type-bypass-via","title":"Rails Active Storage has possible content type bypass via metadata in direct uploads","severity":"medium","exploited":false,"published_at":"2026-03-23T20:54:16+00:00","url":"https://junglewise.ai/threats/cve-2026-33173-rails-active-storage-has-possible-content-type-bypass-via"},{"cve":"CVE-2025-24293","cvss":8.1,"epss":0.0539,"slug":"cve-2025-24293-ruby-on-rails-active-storage-command-injection-in-image","title":"Ruby on Rails Active Storage command injection in image transformations","severity":"high","exploited":false,"published_at":"2026-01-30T21:15:55.677+00:00","url":"https://junglewise.ai/threats/cve-2025-24293-ruby-on-rails-active-storage-command-injection-in-image"},{"cve":"CVE-2024-26144","cvss":3.1,"epss":0.0113,"slug":"cve-2024-26144-rails-has-possible-sensitive-session-information-leak-in-active","title":"Rails has possible Sensitive Session Information Leak in Active Storage","severity":"low","exploited":false,"published_at":"2024-02-27T21:41:16+00:00","url":"https://junglewise.ai/threats/cve-2024-26144-rails-has-possible-sensitive-session-information-leak-in-active"},{"cve":"CVE-2022-21831","cvss":3.1,"epss":0.031,"slug":"cve-2022-21831-possible-code-injection-vulnerability-in-rails-active-storage","title":"Possible code injection vulnerability in Rails / Active Storage","severity":"low","exploited":false,"published_at":"2022-03-08T21:25:54+00:00","url":"https://junglewise.ai/threats/cve-2022-21831-possible-code-injection-vulnerability-in-rails-active-storage"},{"cve":"CVE-2020-8162","cvss":3.1,"epss":0.0303,"slug":"cve-2020-8162-circumvention-of-file-size-limits-in-activestorage","title":"Circumvention of file size limits in ActiveStorage","severity":"low","exploited":false,"published_at":"2020-05-26T15:09:48+00:00","url":"https://junglewise.ai/threats/cve-2020-8162-circumvention-of-file-size-limits-in-activestorage"},{"cve":"CVE-2018-16477","cvss":3,"epss":0.0131,"slug":"cve-2018-16477-exposure-of-sensitive-information-to-an-unauthorized-actor-in","title":"Exposure of Sensitive Information to an Unauthorized Actor in activestorage","severity":"low","exploited":false,"published_at":"2018-12-05T17:17:02+00:00","url":"https://junglewise.ai/threats/cve-2018-16477-exposure-of-sensitive-information-to-an-unauthorized-actor-in"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":2,"exploited":0,"vulnerabilities":2},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":6}],"related":[{"name":"actionpack (RubyGems)","slug":"actionpack","vulnerabilities":77,"url":"https://junglewise.ai/threats/technologies/actionpack"},{"name":"nokogiri (RubyGems)","slug":"nokogiri","vulnerabilities":69,"url":"https://junglewise.ai/threats/technologies/nokogiri"},{"name":"rack (RubyGems)","slug":"rack","vulnerabilities":55,"url":"https://junglewise.ai/threats/technologies/rack"},{"name":"activerecord (RubyGems)","slug":"rubygems-activerecord","vulnerabilities":26,"url":"https://junglewise.ai/threats/technologies/rubygems-activerecord"},{"name":"rubygems-update (RubyGems)","slug":"rubygems-update","vulnerabilities":25,"url":"https://junglewise.ai/threats/technologies/rubygems-update"},{"name":"puppet (RubyGems)","slug":"puppet","vulnerabilities":23,"url":"https://junglewise.ai/threats/technologies/puppet"},{"name":"activesupport (RubyGems)","slug":"activesupport","vulnerabilities":20,"url":"https://junglewise.ai/threats/technologies/activesupport"},{"name":"actionview (RubyGems)","slug":"actionview","vulnerabilities":19,"url":"https://junglewise.ai/threats/technologies/actionview"},{"name":"camaleon_cms (RubyGems)","slug":"camaleon-cms","vulnerabilities":19,"url":"https://junglewise.ai/threats/technologies/camaleon-cms"},{"name":"rails-html-sanitizer (RubyGems)","slug":"rails-html-sanitizer","vulnerabilities":18,"url":"https://junglewise.ai/threats/technologies/rails-html-sanitizer"},{"name":"loofah (RubyGems)","slug":"loofah","vulnerabilities":17,"url":"https://junglewise.ai/threats/technologies/loofah"},{"name":"publify_core (RubyGems)","slug":"publify-core","vulnerabilities":15,"url":"https://junglewise.ai/threats/technologies/publify-core"}],"technology":{"hub":true,"name":"activestorage (RubyGems)","slug":"activestorage","vendor":{"hub":true,"name":"RubyGems","slug":"rubygems","url":"https://junglewise.ai/threats/vendors/rubygems"},"aliases":[],"homepage":"https://edgeguides.rubyonrails.org/active_storage_overview.html","repo_url":"https://github.com/rails/rails/tree/main/activestorage","description":"Ruby on Rails library for attaching files to database records with support for cloud storage services.","url":"https://junglewise.ai/threats/technologies/activestorage"},"most_severe":[{"cve":"CVE-2026-122006","cvss":9.8,"epss":0.0074,"slug":"cve-2026-122006-the-activestorage-gem-before-8-1-4-1-for-ruby-on-rails-when","title":"Ruby on Rails activestorage ImageMagick arbitrary file read/write","severity":"critical","exploited":false,"published_at":"2026-11-04T15:17:42.94+00:00","url":"https://junglewise.ai/threats/cve-2026-122006-the-activestorage-gem-before-8-1-4-1-for-ruby-on-rails-when"},{"cve":"CVE-2026-33195","cvss":9.8,"epss":0.0072,"slug":"cve-2026-33195-ruby-on-rails-active-storage-path-traversal-in-diskservice","title":"Ruby on Rails Active Storage path traversal in DiskService","severity":"critical","exploited":false,"published_at":"2026-03-24T00:16:28.987+00:00","url":"https://junglewise.ai/threats/cve-2026-33195-ruby-on-rails-active-storage-path-traversal-in-diskservice"},{"cvss":9.8,"slug":"duplicate-advisory-active-storage-possible-arbitrary-file-write-and-575968b6","title":"Ruby on Rails Active Storage arbitrary file read/write via ImageMagick","severity":"critical","exploited":false,"published_at":"2026-11-04T15:32:31+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-active-storage-possible-arbitrary-file-write-and-575968b6"},{"cve":"CVE-2026-66066","cvss":4,"epss":0.021,"slug":"cve-2026-66066-ruby-on-rails-active-storage-arbitrary-file-read-via-libvips","title":"Ruby on Rails Active Storage arbitrary file read via libvips","severity":"critical","exploited":false,"published_at":"2026-07-30T19:18:35.843+00:00","url":"https://junglewise.ai/threats/cve-2026-66066-ruby-on-rails-active-storage-arbitrary-file-read-via-libvips"},{"cve":"CVE-2026-126186","cvss":8.8,"slug":"cve-2026-126186-active-storage-possible-arbitrary-file-read-and-remote-code","title":"Ruby on Rails Active Storage arbitrary file read and RCE in media processing","severity":"high","exploited":false,"published_at":"2026-11-10T22:18:31.843+00:00","url":"https://junglewise.ai/threats/cve-2026-126186-active-storage-possible-arbitrary-file-read-and-remote-code"},{"cve":"CVE-2025-24293","cvss":8.1,"epss":0.0539,"slug":"cve-2025-24293-ruby-on-rails-active-storage-command-injection-in-image","title":"Ruby on Rails Active Storage command injection in image transformations","severity":"high","exploited":false,"published_at":"2026-01-30T21:15:55.677+00:00","url":"https://junglewise.ai/threats/cve-2025-24293-ruby-on-rails-active-storage-command-injection-in-image"},{"cve":"CVE-2026-126085","cvss":5.3,"slug":"cve-2026-126085-active-storage-possible-circumvention-of-file-size-limits-in","title":"Ruby on Rails Active Storage content length bypass in Google Cloud Storage uploads","severity":"medium","exploited":false,"published_at":"2026-11-10T22:18:31.413+00:00","url":"https://junglewise.ai/threats/cve-2026-126085-active-storage-possible-circumvention-of-file-size-limits-in"},{"cve":"CVE-2026-126071","cvss":5.3,"slug":"cve-2026-126071-active-storage-makes-it-simple-to-upload-and-reference-files-in","title":"Ruby on Rails Active Storage denial of service via stream error handling","severity":"medium","exploited":false,"published_at":"2026-11-10T21:19:25.263+00:00","url":"https://junglewise.ai/threats/cve-2026-126071-active-storage-makes-it-simple-to-upload-and-reference-files-in"},{"cve":"CVE-2026-126084","cvss":4.7,"epss":0.0014,"slug":"cve-2026-126084-active-storage-makes-it-simple-to-upload-and-reference-files-in","title":"Ruby on Rails Active Storage GCS signature bypass","severity":"medium","exploited":false,"published_at":"2026-11-10T21:19:27.287+00:00","url":"https://junglewise.ai/threats/cve-2026-126084-active-storage-makes-it-simple-to-upload-and-reference-files-in"},{"cve":"CVE-2026-126074","cvss":4.3,"slug":"cve-2026-126074-active-storage-makes-it-simple-to-upload-and-reference-files-in","title":"Rails Active Storage persistent DoS via NUL byte filename","severity":"medium","exploited":false,"published_at":"2026-11-10T21:19:25.72+00:00","url":"https://junglewise.ai/threats/cve-2026-126074-active-storage-makes-it-simple-to-upload-and-reference-files-in"}],"generated_at":"2026-11-13T03:07:00.155039+00:00"}