Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads

A critical vulnerability in Ruby on Rails allows unauthenticated attackers to write arbitrary files on a server by uploading a specially crafted file. The flaw resides in Active Storage, the Rails component responsible for handling file uploads, and is triggered when applications process uploads using ImageMagick. The Rails project has publicly disclosed the vulnerability via an advisory. Fixes have been released in versions 8.1.4.1 and 8.0.5.2. Applications not using ImageMagick for upload processing are not affected. The severity is high due to the unauthenticated nature of the attack and potential for remote code execution or server compromise via arbitrary file writes.