Mittel 5.3Linux-Server
CVE-2026-126085
activestorage: Active Storage: File size validation bypass via missing direct-upload content length constraints
activestorage
### Impact `ActiveStorage::Service::GCSService#url_for_direct_upload` does not bind the declared content length into the signed direct-upload URL, and `#headers_for_direct_upload` returns no length constraint, so the URL authorizes an upload body of any size. A direct-upload client could store a file larger than the `byte_size` it declared, and the resulting blob keeps the declared size, possibly bypassing application file size validations and quotas. This is the weakness…
10. Nov 2026
Original bei Red Hat öffnen