High severity8.8NVD Advisory· Published Aug 30, 2022· Updated Jun 17, 2026

CVE-2022-36563

Description

Incorrect access control in the install directory (C:\RailsInstaller) of Rubyinstaller2 v3.1.2 and below allows authenticated attackers to execute arbitrary code via overwriting binaries located in the directory.

Affected products

Rubyinstaller2/Rubyinstaller2description
Rubyinstaller2/Rubyinstaller2llm-fuzzy
Range: <=3.1.2

Patches

Vulnerability mechanics

References

github.com/ycdxsb/Vuln/blob/main/Railsinstaller-Vuln/Railsinstaller-Vuln.mdnvdBroken LinkThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000