Tagged: CVE-2026-59726

RufRoot CVE-2026-59726 unauthenticated RCE vulnerability in Ruflo MCP Bridge exposing AI agent API keys and persistent memory to attackers

August 4, 2026

RufRoot CVE-2026-59726: Unauthenticated RCE in Ruflo MCP Bridge Exposes AI Agent Keys

A single unauthenticated POST request was sufficient to open a command shell inside one of the most widely deployed AI agent orchestration platforms on GitHub. From that foothold, an attacker could steal API keys...