PT-2026-42121 · Ruby · Ruby

Published 2026-05-20 · Updated 2026-06-04 · CVE-2026-46727

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ruby versions 4.0.0 through 4.0.4

Description Security issues were identified in the Ruby language implementation that require remediation to ensure system security.

Recommendations Update Ruby to version 4.0.5.

Exploit

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

BIT-RUBY-2026-46727

BIT-RUBY-MIN-2026-46727

CVE-2026-46727

OPENSUSE-SU-2026:10839-1

Affected Products

Ruby

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46727.json · Exploit
• https://osv.dev/vulnerability/CVE-2026-46727 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-ruby-2026-46727 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-46727 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-46727 · Vendor Advisory
• https://ruby-lang.org/en/news/2026/05/20/getaddrinfo-cve-2026-46727 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46727 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-ruby-min-2026-46727 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10839-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-46727 · Security Note
• https://reddit.com/gallery/1twzgl0 · Reddit Post
• https://suse.com/security/cve/CVE-2026-46727 · Note
• https://hackerone.com/reports/3607434 · Note
• https://twitter.com/k0kubun/status/2056897496195231992 · Twitter Post