Critical Ruby on Rails Vulnerability in Attackers’ Crosshairs

The KindaRails2Shell vulnerability (CVE-2026-66066) in Ruby on Rails is an arbitrary file read flaw that leads to secret exposure and remote code execution. It stems from a discrepancy between how Rails and libvips determine file types: Rails trusts client-supplied content types, while libvips inspects magic bytes. Attackers can craft files declared as MATLAB Level 5, causing libvips to use the MATLAB loader and libmatio to hand off to HDF5, which supports external file references. This chain allows reading arbitrary server files as image pixels. Exploiting this, attackers can access sensitive files readable by the Rails process, including credentials and keys, enabling session forgery and further system compromise. Although patches were issued in July 2026, some RCE vectors via Marshal deserialization remain effective on patched versions. Approximately 7,000 vulnerable Rails instances were identified in early August 2026. Rails has released forensic tools to detect exploitation attempts.

Successful exploitation allows unauthenticated attackers to read arbitrary files on the server, exposing sensitive secrets such as credential databases and storage keys. With these secrets, attackers can forge sessions, move laterally within networks, and execute arbitrary code remotely on affected systems. This can lead to full system compromise and unauthorized access to protected resources. Exploitation has been observed in the wild since approximately one month after patches were released.

Official patches for this vulnerability were released by Ruby on Rails in late July 2026. Immediate application of these patches is strongly recommended for all Rails applications that use libvips for Active Storage image processing and accept image uploads from untrusted users. Rails has also published forensic tools to detect exploitation attempts. Note that while the patch blocks the libvips file read vector, some remote code execution vectors involving Marshal deserialization may still be possible on patched servers, so monitoring and applying any subsequent updates is advised.