Rails Active Storage RCE Vulnerability: Critical PoC Released

### Executive summary CVE-2026-66066 (KindaRails2Shell) is a critical vulnerability in Rails Active Storage when processed with libvips that permits unauthenticated attackers to upload specially crafted images to disclose server-side secrets (including secret_key_base) and potentially escalate to remote code execution; public proof-of-concept code and a proposed Metasploit module increase the risk of active exploitation, so immediate patching, credential rotation, and log review are strongly recommended.