A critical denial of service vulnerability in Rails Active Storage allows unauthenticated remote attackers to exhaust server memory by requesting large byte ranges.

The vulnerability exists within the proxy controller of Active Storage, which improperly loads entire file byte ranges into memory when processing requests. An unauthenticated attacker can exploit this by sending a request with a large or unbounded Range header, leading to memory exhaustion and service failure.

The vulnerability carries a CVSS score of 7.5, indicating a high severity risk primarily due to the potential for service disruption. Successful exploitation results in a denial of service, which can lead to significant operational downtime, loss of user access to critical application data, and potential degradation of infrastructure stability.

Immediate Action: Update the affected Ruby on Rails project to version 8.1.2.1, 8.0.4.1, or 7.2.3.1 depending on the current branch in use.

Proactive Monitoring: Monitor server memory usage and HTTP request logs for recurring or anomalous requests containing large or suspicious Range headers.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to inspect and block incoming HTTP requests that contain excessively large or malformed Range headers.

Public Exploit Available: No

Given the high CVSS severity and the ease of exploitation, organizations using the affected versions of Active Storage should prioritize applying the provided security patches. Upgrading to the latest supported releases is the only definitive way to resolve the underlying memory allocation flaw and restore system resilience against denial of service attempts.