CVE-2026-59726 Ruflo: Unauthenticated RCE in MCP bridge default docker-compose deployment
CriticalCVSS 10.0
EPSS 6.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Ruflo is an agent meta-harness for Claude Code and Codex. Prior to 3.16.3, ruflo's default docker-compose deployment exposed the MCP bridge POST /mcp and POST /mcp/:group endpoints without authentication, allowing an unauthenticated network attacker to invoke tools/call to terminal_execute, obtain a shell in the bridge container, read provider API keys, and poison AgentDB learning-store patterns. This issue is fixed in version 3.16.3.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ruvnet ruflo | = < 3.16.3 | No fix listed |