Skip to content

CVE record · 1 source

CVE-2026-126085

CVSS 5.3

Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record objects.

Vendor: Ruby on Rails
Product: rails
CVSS v3.1: 5.3 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness: CWE-602
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

28

CVE NVD 5h ago

Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record objects.

Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record objects. Prior to 8.1.4.1 and 8.0.5.2, ActiveStorage::Service::GCSService#url_for_direct_upload does not bind…

CVSS 5.3 Fix available CVE-2026-126085 Ruby on Rails