Cloudinary outage, 24 October 2026
Notice regarding recently-reported Ruby regular expression vulnerabilities (CVE-2026-89078, CVE-2026-93577, CVE-2026-97229, CVE-2026-110264)
- Started
- Resolved
- 24 Oct 2026, 07:03 UTC (after 1 min)
- Impact
- Not stated
Is this still happening?
No. Cloudinary marked this incident resolved on 24 Oct 2026, 07:03 UTC, 1 min after it began.
Right now: Cloudinary reports all systems operational. (as of 26 Oct, 03:45 UTC) Live Cloudinary status
Last update from Cloudinary
On October 23, 2026, the Ruby project released security fixes for vulnerabilities in its regular expression engine (CVE-2026-89078, CVE-2026-93577, CVE-2026-97229, CVE-2026-110264). Cloudinary upgraded its core platform, including its upload, transformation, and delivery APIs and Console, to the patched Ruby version on the same day. Our review found no evidence of exploitation and no impact on customers or customer data. No action is required on your part for the Cloudinary platform. Customers who use Ruby in their own applications, including with the Cloudinary Ruby SDK, should update Ruby in their environments to a patched release (3.3.13, 3.4.12, 4.0.9 or later).
Read the full incident on the official Cloudinary status page
Similar Cloudinary incidents
Earlier incidents with the same affected part or wording - useful to see how long this kind of problem usually takes.