CVE-2026-59726 – ruflo
“An exposed management interface can turn a trusted automation tool into an attacker’s command center.”
This patch addresses CVE-2026-59726, affecting ruflo prior to version 3.16.3. The CVSS score is 10.0, which is Critical severity. The vulnerability stems from unauthenticated exposure of the MCP bridge endpoints in the default Docker Compose deployment, allowing remote attackers to invoke privileged tool functions without authentication. No verified real-world exploitation has been reported.
A successful attack could allow an unauthenticated attacker to execute terminal commands, obtain a shell within the bridge container, read provider API keys, and poison AgentDB learning-store patterns. The issue is associated with CWE-306 (Missing Authentication for Critical Function), CWE-78 (OS Command Injection), and CWE-942 (Permissive Cross-domain Policy with Untrusted Domains). The vulnerability has Remote Code Execution (RCE) and Elevation of Privilege (EoP) characteristics. This issue is resolved in ruflo version 3.16.3.
Key Details
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- None
- CWE Classification
- CWE-78