Critical Ruflo MCP Bridge Flaw Lets Attackers Execute Commands and Hijack AI Agents

Cybersecuritynews •Guru Baran • July 29, 2026

A critical security flaw in the open-source AI orchestration platform Ruflo has been disclosed, allowing unauthenticated attackers to execute arbitrary commands and fully compromise AI agent environments. Assigned a maximum CVSS base score of 10.0, the vulnerability (tracked as CVE-2026-59726) was discovered by Noma Labs and affects Ruflo’s Model Context Protocol (MCP) Bridge, a core […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Ruflo Vulnerability Allows Full Control of AI Agent Platforms Noma Labs has disclosed a critical vulnerability (CVE-2026-59726) in the Ruflo AI hosting platform, allowing unauthenticated attackers to execute arbitrary commands and take full control of AI agent environments. The flaw, known as 'RufRoot', has a maximum CVSS score of 10.0 and enables attackers to exploit a Model Context Protocol (MCP) bridge that is open by default. This vulnerability allows attackers to steal sensitive API keys, read user conversations, and tamper with the AI's memory, influencing future interactions. The vulnerability was responsibly disclosed on June 30, 2026, and Ruflo released a patch within 24 hours, locking down the platform's configuration. However, experts warn that simply patching the software does not guarantee safety, as compromised agents may still operate. Organizations are advised to rotate credentials and audit AI memory for tampering. The incident highlights the emerging risks associated with AI systems. 11 sources 73

Extracted Entities

Critical Ruflo MCP Bridge Flaw Lets Attackers Execute Commands and Hijack AI Agents

The full story

Extracted Entities

CVEs (1)

CWE Weaknesses (1)

Platforms (1)