Hackers have started exploiting CVE-2026-66066, referred to as KindaRails2Shell, a critical vulnerability in Ruby on Rails.