UpHeron
All vulnerabilities

Servers and applications

CVE-2026-126188

Possible local file disclosure in Active Storage video previews and analysis

Severity
Low 3.7
Published
4 Nov 2026
Last changed
10 Nov 2026
Added to UpHeron
10 Nov 2026
Fixed in
8.0.5.2, 8.1.4.1
Also known as
GHSA-3f4q-8x5m-76v8
Sources
CVE Program, Project advisories (GitHub)

Description

Active Storage: Possible local file disclosure in Active Storage video previews and analysis

Affected software

SoftwareAffected versions
Ruby on RailsServers and applications · cna:rails|rails
  • Every version before 8.0.5.2
  • From 8.1 before 8.1.4.1
Ruby on RailsServers and applications · github:rails/rails
  • Every version before 8.0.5.2
  • From 8.1 before 8.1.4.1

References