Skip to content
Sign in
CVE-2026-5972610.0CriticalCWE-78

Ruflo: Unauthenticated RCE in MCP bridge default docker-compose deployment

ruvnet · ruflo

Not in CISA KEV
3.0%probability of exploitation in the next 30 days
87th percentile
050100

Higher than 87% of scored CVEs

10.0CriticalCVSS 3.1
LowCrit.

DescriptionNVD

Ruflo is an agent meta-harness for Claude Code and Codex. Prior to 3.16.3, ruflo's default docker-compose deployment exposed the MCP bridge POST /mcp and POST /mcp/:group endpoints without authentication, allowing an unauthenticated network attacker to invoke tools/call to terminal_execute, obtain a shell in the bridge container, read provider API keys, and poison AgentDB learning-store patterns. This issue is fixed in version 3.16.3.

Coverage2 articles · 2 outlets

One row per outlet, in order of first report. First in our coverage: Dark Reading, 29 Jul.

Full timeline
Quiet for 13 weekslast report 30 Jul2 articles2 outlets
29 Jul · Dark Reading first15 Sep1 Oct17 OctNow
  • Wed 29 Jul, 16:28 UTC. Dark Reading, first report. Ruflo Flaw CVE-2026-59726 Exposes AI Agents to Attackers.
  • Thu 30 Jul, 10:00 UTC. SecurityWeek, its first report on the story. Critical Ruflo Flaw Lets Attackers Spawn Rogue AI Swarms.
All coveragerunning total2Dark Reading1SecurityWeek130 Jul31 Aug2 OctNow
  • First report
  • Article
  • Running total
Show as table
2 articles about CVE-2026-59726 from 2 outlets
Published (UTC)OutletHeadline
29 Jul 16:28Dark ReadingRuflo Flaw CVE-2026-59726 Exposes AI Agents to Attackers
30 Jul 10:00SecurityWeekCritical Ruflo Flaw Lets Attackers Spawn Rogue AI Swarms
  1. Critical Ruflo Flaw Lets Attackers Spawn Rogue AI Swarms
    SecurityWeek
  2. Ruflo Flaw CVE-2026-59726 Exposes AI Agents to Attackers
    Dark Reading · first in our coverage

New articles also arrive in the RSS feed.

References

CyberSIXTSignal over noise
Updated AboutDevelopersSign in