Critical Ruflo MCP Bridge Flaw Allows Full AI Agent Platform Takeover

Gbhackers •Divya • July 29, 2026

A critical vulnerability in the open-source AI orchestration platform Ruflo has been disclosed, allowing unauthenticated attackers to achieve full remote code execution (RCE) with a single HTTP request. This vulnerability, tracked as CVE-2026-59726 and referred to as “RufRoot,” has been assigned a maximum CVSS score of 10.0 due to its ease of exploitation and potential […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Ruflo Vulnerability Allows Full Control of AI Agent Platforms Noma Labs has disclosed a critical vulnerability (CVE-2026-59726) in the Ruflo AI hosting platform, allowing unauthenticated attackers to execute arbitrary commands and take full control of AI agent environments. The flaw, known as 'RufRoot', has a maximum CVSS score of 10.0 and enables attackers to exploit a Model Context Protocol (MCP) bridge that is open by default. This vulnerability allows attackers to steal sensitive API keys, read user conversations, and tamper with the AI's memory, influencing future interactions. The vulnerability was responsibly disclosed on June 30, 2026, and Ruflo released a patch within 24 hours, locking down the platform's configuration. However, experts warn that simply patching the software does not guarantee safety, as compromised agents may still operate. Organizations are advised to rotate credentials and audit AI memory for tampering. The incident highlights the emerging risks associated with AI systems. 11 sources 73

Extracted Entities

Critical Ruflo MCP Bridge Flaw Allows Full AI Agent Platform Takeover

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)

Vulnerabilities (1)