Ruflo unauthenticated RCE (CVE-2026-59726)
Vulnerability
Summary
Hide ▲
Show ▼
CVE-2026-59726 puts Ruflo deployments before 3.16.3 at risk of unauthenticated remote code execution through the default MCP bridge. The flaw exposed 233 tools over POST /mcp on network-reachable instances, letting an attacker invoke terminal_execute without authentication. Compromise could expose LLM API keys, harvest stored conversations, and poison AgentDB memory. The maintainer pushed a fix within 24 hours of disclosure and changed the bridge to bind to loopback by default.
Related Happenings
Ruflo exposed-instance remediation guidance
Advisory/Mitigation
H score57
First: 29.07.2026 18:39
Last: 29.07.2026 18:39
Sources 1
How related:
Operators running an exposed instance are recommended to immediately close firewall ports 3001 and 27017, rotate all LLM API keys, audit the AgentDB pattern store for injected agentdb_pattern-store entries, and check MongoDB for signs of tampering.
About this happening:
Operators running exposed Ruflo instances are being told to close ports 3001 and 27017, rotate all LLM API keys, and inspect for tampering after disclosure of CV...
Ruflo exposed-instance remediation guidance
Advisory/MitigationHow related: Operators running an exposed instance are recommended to immediately close firewall ports 3001 and 27017, rotate all LLM API keys, audit the AgentDB pattern store for injected agentdb_pattern-store entries, and check MongoDB for signs of tampering.
About this happening: Operators running exposed Ruflo instances are being told to close ports 3001 and 27017, rotate all LLM API keys, and inspect for tampering after disclosure of CV...
PCPJack worm-like credential theft framework
Malware Activity
H score27
First: 07.05.2026 20:45
Last: 07.05.2026 20:45
Sources 1
About this happening:
The PCPJack malware framework now conducts credential theft across exposed cloud infrastructure, raising the risk of account takeover and follow-on intrusion. It matters b...
PCPJack worm-like credential theft framework
Malware ActivityAbout this happening: The PCPJack malware framework now conducts credential theft across exposed cloud infrastructure, raising the risk of account takeover and follow-on intrusion. It matters b...
MCP STDIO arbitrary command execution security flaw
Vulnerability
H score53
First: 16.04.2026 12:40
Last: 16.04.2026 12:40
Sources 1
About this happening:
A critical MCP flaw in the STDIO interface can trigger arbitrary command execution, putting connected AI systems at risk of data exposure and system takeover...
MCP STDIO arbitrary command execution security flaw
VulnerabilityAbout this happening: A critical MCP flaw in the STDIO interface can trigger arbitrary command execution, putting connected AI systems at risk of data exposure and system takeover...
Timeline
-
29.07.2026 18:39 2 articles · 1h ago
Ruflo unauthenticated RCE (CVE-2026-59726)
Initial DisclosureCVE-2026-59726 exposed Ruflo's default MCP bridge to unauthenticated remote code execution on deployments before 3.16.3. The initial fix arrived within 24 hours after responsible disclosure on June 30, 2026.
Show sources
- Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory — thehackernews.com — 29.07.2026 18:39
- Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory — thehackernews.com — 29.07.2026 18:39