{"affected":[{"defaultStatus":"unaffected","ecosystem":"gem","packageName":"activestorage","product":"Active Storage","source":"CNA: mitre","vendor":"rubyonrails","versions":[{"lessThan":"8.0.5.2","status":"affected","version":"0","versionType":"custom"},{"lessThan":"8.1.4.1","status":"affected","version":"8.1","versionType":"custom"}]}],"cveId":"CVE-2026-122006","cwes":["CWE-1188"],"description":"The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write operations (e.g., reading secret_key_base) because the ImageMagick analyzer runs when a file is attached, and there is not an ImageMagick security policy to block unintended functionality.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":9.8,"severity":"critical","source":"CNA: mitre","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},{"score":9.8,"severity":"critical","source":"NVD: cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793826519235,"publishedAt":1793801537584,"references":[{"source":"CNA: mitre","tags":[],"url":"https://github.com/rails/rails/security/advisories/GHSA-f3w6-w445-fwh9"},{"source":"CNA: mitre","tags":[],"url":"https://github.com/rails/rails/releases/tag/v8.1.4.1"},{"source":"CNA: mitre","tags":[],"url":"https://github.com/rails/rails/releases/tag/v8.0.5.2"},{"source":"ADP: CVE","tags":[],"url":"https://github.com/digitalocean/droplet-1-clicks/pull/488"},{"source":"ADP: CVE","tags":[],"url":"https://github.com/rubysec/ruby-advisory-db/pull/1300"},{"source":"cve@mitre.org","tags":[],"url":"https://github.com/rails/rails/releases/tag/v8.0.5.2"},{"source":"cve@mitre.org","tags":[],"url":"https://github.com/rails/rails/releases/tag/v8.1.4.1"},{"source":"cve@mitre.org","tags":[],"url":"https://github.com/rails/rails/security/advisories/GHSA-f3w6-w445-fwh9"}],"remediation":[],"revision":"b83d742e946aab155f6395cdd71a57ba7898b3bff016df983db7d00b8af78195","sources":[{"modifiedAt":1793826519235,"name":"CNA: mitre","retrievedAt":1793830360067,"url":"https://www.cve.org/CVERecord?id=CVE-2026-122006"},{"modifiedAt":1793805462940,"name":"NVD","retrievedAt":1793816705253,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-122006"}],"ssvc":null,"status":"published","title":"CVE-2026-122006","updatedAt":1793830360067}