Critical Rails Bug Threatens to Derail Vulnerable Servers
Rails Active Storage ImageMagick integration allows arbitrary file read and write.
Stories per day · 30 days
2 RSS
Relatedrails2active-storage1activestorage1arbitrary-file1cve-2026-399191file-write1ghostscript1heap-overflow1image-uploads1memory-leak1pdf1rails-security1remote-code-execution1ruby-on-rails1wordpress1xml1xmp1
20 stories, newest first · one card per story
Stories tagged #imagemagick
Critical Ruby on Rails Flaw Lets Hackers Steal Server Secrets Through Malicious Image Uploads
Unauthenticated image uploads via Active Storage can read and write server files in default ImageMagick setups; fixed in Rails 8.0.5.2 and 8.1.4.1 with a security policy.
1
Rails flaw lets attackers write files via ImageMagick uploads
Ruby on Rails Active Storage before 8.1.4.1 and 8.0.5.2 allows arbitrary file write and read of secrets via crafted uploads processed by ImageMagick.
2
ImageMagick leaks XMP parameter-entity strings (CVE-2026-116155)
Fixed in ImageMagick 7.1.2-33 and 6.9.13-58; reject XMP profiles in policy.xml as a stopgap.
Ghostscript flaw lets hackers hijack servers via PDF uploads
Ghostscript heap overflow CVE-2026-39919 can enable remote code execution through crafted PDF uploads, with no exploitation seen yet.
9
Wordfence Argus Discovers Critical Vulnerability in Ghostscript, the Program That Turns Uploaded PDFs into Thumbnails on Your Server
Wordfence disclosed Ghostscript CVE-2026-39919, a CVSS 9.8 flaw fixed in 10.08.0, with lab PDF remote code execution.
12
Discourse ImageMagick Vulnerability Enables Arbitrary File Read Through Malicious Image Uploads
Researchers disclosed CVE-2026-55420, letting low-privilege Discourse users read server files via ImageMagick uploads.
7
Discourse Image Pipeline Exploit Chains JPEG Race, GhostScript and ImageMagick for File Read
Searchlight Cyber showed a patched Discourse upload chain letting basic users read server files via ImageMagick.
5
Malicious HEIC Images Can Trigger Remote Code Execution on WordPress Servers
Fortbridge showed authenticated WordPress HEIC uploads can exploit libheif and execute code in PHP-FPM.
Critical libheif Vulnerability Could Enable Remote Code Execution Through WordPress Image Uploads
A critical libheif heap overflow, fixed in 1.23.3, enabled authenticated WordPress RCE via crafted HEIC uploads.
USN-8859-1: ImageMagick vulnerabilities
Ubuntu patches ImageMagick flaws that could let attackers cause denial of service or leak information.
USN-8810-1: ImageMagick vulnerabilities
Ubuntu patched ImageMagick flaws that could cause denial of service or code execution.
AI Helps Hackers Hijack OpenAI Staff Accounts Through a Forum
Hacktron researchers used Claude Opus 5 to build a libheif exploit in hours, hijacking OpenAI staff accounts via a Discourse forum shared-SSO flaw.
3
Researchers used Claude to hack OpenAI employees' ChatGPT accounts
Researchers chained a libheif heap overflow with an SSO misconfiguration to take over OpenAI employee ChatGPT accounts, earning a $6,500 bounty.
5
AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code
Researchers chained a libheif RCE in Discourse with an over-privileged OpenAI forum sign-in token flaw to take over ChatGPT and Codex accounts.
3
Researchers Use Claude Opus 5 to Hack OpenAI Forum and Reach Internal Repositories
Researchers used Claude Opus 5 to build a libheif exploit that compromised OpenAI's forum, hijacked employee ChatGPT/Codex accounts, and reached the internal monorepo.
4
A heap overflow and SSO misconfiguration to compromise OpenAI internal repos
Hacktron researchers chained a libheif heap overflow in Discourse with an OpenAI SSO flaw to take over employee ChatGPT/Codex accounts and access internal repositories.
3
USN-8739-2: ImageMagick vulnerabilities
Ubuntu releases USN-8739-2, extending ImageMagick fixes for four CVEs including possible arbitrary code execution to Ubuntu 24.04 LTS.
USN-8739-1: ImageMagick vulnerabilities
Canonical released USN-8739-1 fixing five ImageMagick flaws that could cause denial of service or arbitrary code execution.
When a PNG Isn’t a PNG: WordPress Patches an Author-Level Imagick RCE
WordPress 7.0.4 patches an author-level RCE in how uploaded media is handed to ImageMagick.