Ruflo MCP Bridge Assigned CVE-2026-59726 for Critical Unauthenticated RCE | vulnerability-disclosure
Ruflo, an agent meta harness for AI coding tools including Claude Code and Codex, has been assigned CVE 2026 59726 for a critical unauthenticated RCE vulnerabi…
Published on MyPrivateClaw
Jul 30, 2026, 10:01 PM UTC
Coverage date
Jul 29, 2026
Last updated
Jul 30, 2026, 10:01 PM UTC
News summary
Prior to version 3.16.3, ruflo's default docker compose deployment exposed the MCP bridge POST /mcp and POST /mcp/:group endpoints without authentication, bound to all network interfaces, allowing an unauthenticated network attacker to invoke tools/call on terminal execute and obtain a shell inside the bridge container. The vulnerability carries a CVSS v3.1 score of 10 Critical (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). The vulnerability allows an unauthenticated attacker to read provider API keys from the container environment, spawn attacker controlled AI agent swarms on the victim's keys, and poison the AgentDB learning store patterns that steer future AI outputs for all users of the instance. AgentDB poisoning requires the attacker to have shell access in the bridge container first. The vulnerability is fixed in Ruflo version 3.16.3, released July 1, 2026 as a security release addressin…