Researchers Identify Rack::Static Vulnerability Enabling Data Breaches in Ruby Servers
CVE-2025-27610 allows unauthenticated access to sensitive files in Rack Ruby apps due to root misconfig.
More info