Exploit for CVE-2026-66066

githubexploit · 2026-08-03

Description

KindaRails2Shell PoC for CVE-2026-66066 enables libvips file read and remote code execution in Rails Active Storage.

Entry point

Parameterblob · path

Pathrails/active_storage/direct_uploads

Active Storage direct upload endpoint exploited to trigger libvips-based arbitrary file read in vulnerable Rails versions (PoC describes upload path and subsequent file read).

All known vulnerabilities by product

Ruby On Rails

CVSS 9.5 for CVE-2026-66066

9.5

HIGH SEVERITY

Version 4.0

VectorCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/SC:H/VI:H/SI:H/VA:H/SA:H

Attack Vector:NETWORK

Attack Complexity:LOW

Attack Requirements:PRESENT

Privileges Required:NONE

User Interaction:NONE

Working code

100%confidence this exploit runs

Based on 2 file(s) in the source

CVE Information

CVE-2026-66066

Exploit Details

Modified:2026-08-03 12:32

Last Seen:2026-08-03 12:50

Reporter:HackSpeak

Written in:Python

Last commit:2026-08-03

Other exploits for CVE-2026-66066

Exploit for CVE-2026-66066

2026-07-31 0xshaGITHUB

Exploit for CVE-2026-66066

2026-07-29 pavegGITHUB

Exploit for CVE-2026-66066

2026-07-29 0xBlackashGITHUB

Exploit for CVE-2026-66066

2026-07-29 Zer0SumGam3GITHUB

Exploit Code

README3 lines

## https://sploitus.com/exploit?id=04CDB004-ADE7-5A64-924D-DAFA4290F817
# kindarails2shell-poc
CVE-2026-66066 (KindaRails2Shell) PoC - Rails Active Storage/libvips arbitrary file read to RCE; for authorized security testing

Exploit Code

Share

Share on social media: