BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more
← CVE Radar

CVE-2026-59726Ruflo: Unauthenticated RCE in MCP bridge default docker-compose deployment

Ruflo is an agent meta-harness for Claude Code and Codex. Prior to 3.16.3, ruflo's default docker-compose deployment exposed the MCP bridge POST /mcp and POST /mcp/:group endpoints without authentication, allowing an unauthenticated network attacker to invoke tools/call to terminal_execute, obtain a shell in the bridge container, read provider API keys, and poison AgentDB learning-store patterns. This issue is fixed in version 3.16.3.

10.0 CRITICALEPSS 3.01%Not in KEVNVD: Deferred

OverviewAffected ProductsReferences
NVD CVE.org

Overview

Severity

ScoreSeverityVersionVector String
10.0CRITICAL3.1GitHub_M (CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Details

CVE ID
CVE-2026-59726
Status
Deferred
Assigner (CNA)
GitHub_M
Published
Jul 9, 2026
Last modified
2026-10-25 17:10 UTC
Weaknesses
  • CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
  • CWE-306 · Missing Authentication for Critical Function
  • CWE-942 · Permissive Cross-domain Policy with Untrusted Domains

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 07:48 UTC.