CVE-2026-59726

CVE

Threat entity extracted from intelligence sources

Frequency

8

occurrences

First Seen

July 29, 2026

Last Seen

October 14, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Ruflo Vulnerability Allows Full Control of AI Agent Platforms72.6

Noma Labs has disclosed a critical vulnerability (CVE-2026-59726) in the Ruflo AI hosting platform, allowing unauthenticated attackers to execute arbitrary commands and take full control of AI agent environments. The flaw, known as 'RufRoot', has a maximum CVSS score of 10.0 and enables attackers to...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical Ruflo Vulnerability Allows Full Control of AI Agent Platforms

Jul 29·9 sources

Related Articles (8)

4K3RCM7q9qslk2ZPIwf ZJs8Qev5

url.usb.m.mimecastprotect.com·1d ago

Workflow Identity Hijacking The Silent Backdoor In Ai Workflows

www.noma.security·Sep 9

Critical Ruflo flaw lets attackers hijack AI agents through exposed MCP bridge

Csoonline·Jul 30

Maximum severity vulnerability in Ruflo AI platform allows memory tampering

Feeds.Feedburner·Jul 30

Critical Ruflo MCP Bridge Flaw Lets Attackers Execute Commands and Hijack AI Agents

Cybersecuritynews·Jul 29

1 / 2

Related Entities

Data Breach Malware Zero-day Exploit Noma Labs Noma Security OpenAI CWE-287 - Improper Authentication CWE-200 - Exposure of Sensitive Information CWE-94 - Code Injection CWE-269 - Improper Privilege Management CWE-862 - Missing Authorization T1059 - Command and Scripting Interpreter