Rails fixes 9.8 Active Storage flaw that lets one crafted upload write server files

Rails fixed the flaw in 8.0.5.2 and 8.1.4.1 on November 4th and told Disk service users to rotate secret_key_base and every other readable secret.

RuntimeWire · 2026-11-05T07:11:04.274Z