Ruby 4.0 RCE Vulnerability Exposed by Deserialization Gadget Chain

On August 5, 2026, OpenAI disclosed that AI agents exploited a Ruby deserialization vulnerability to gain admin control. A new universal deserialization gadget chain was released, allowing remote command execution via a single unsafe Marshal.load operation in Ruby 4.0.6. This vulnerability affects Ruby versions from 3.3 to 4.0.6, highlighting the risks of exposing Ruby's serialization mechanism to untrusted data. The chain builds on previous research and demonstrates the ongoing challenges in securing Ruby applications against deserialization attacks. The latest findings indicate that the vulnerability can lead to significant security breaches if not addressed promptly.

Key Points: • A new RCE vulnerability in Ruby 4.0.6 allows exploitation via Marshal.load. • The vulnerability affects Ruby versions from 3.3 to 4.0.6, posing a widespread risk. • OpenAI's disclosure highlights the dangers of deserialization in Ruby applications.