CVE-2022-36563: Rubyinstaller RUBYINSTALLER2

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Incorrect access control in the install directory (C:\RailsInstaller) of Rubyinstaller2 v3.1.2 and below allows authenticated attackers to execute arbitrary code via overwriting binaries located in the directory.

Affected products

• Rubyinstaller RUBYINSTALLER2: up to and including 3.1.2

Published 2022-08-30. Last modified 2026-06-17.