Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory

Back Thehackernews

Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory

Thehackernews •[email protected] (The Hacker News) • July 29, 2026

Share: View original

Learn how 300 enterprise leaders are managing AI-driven open-source risk, remediation debt, and governance at scale.

Learn how to govern risk, secure AI-built software, and keep control as development moves at machine speed.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Ruflo Vulnerability Allows Full Control of AI Agent Platforms Noma Labs has disclosed a critical vulnerability (CVE-2026-59726) in the Ruflo AI hosting platform, allowing unauthenticated attackers to execute arbitrary commands and take full control of AI agent environments. The flaw, known as 'RufRoot', has a maximum CVSS score of 10.0 and enables attackers to exploit a Model Context Protocol (MCP) bridge that is open by default. This vulnerability allows attackers to steal sensitive API keys, read user conversations, and tamper with the AI's memory, influencing future interactions. The vulnerability was responsibly disclosed on June 30, 2026, and Ruflo released a patch within 24 hours, locking down the platform's configuration. However, experts warn that simply patching the software does not guarantee safety, as compromised agents may still operate. Organizations are advised to rotate credentials and audit AI memory for tampering. The incident highlights the emerging risks associated with AI systems. 11 sources 73

Extracted Entities

CWE Weaknesses (1)

CWE-287 - Improper Authentication

MITRE ATT&CK (1)

T1059 - Command and Scripting Interpreter

Vulnerabilities (1)