Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory

Home / Tech / Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory

Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory

July 29, 2026 dirk 0 Comments 3 tags

Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory

Cybersecurity researchers have flagged a maximum-severity security flaw in Ruflo, an open-source agent meta-harness for Anthropic Claude Code and OpenAI Codex, that could result in unauthenticated remote code execution.

The vulnerability, tracked as CVE-2026-59726 (CVSS score: 10.0), impacts all versions of the project before version 3.16.3. It has been codenamed RufRoot by Noma Security’s

Source: The Hacker News

Explore More

New BioShocking Attack Tricks AI Browsers Into Leaking User Credentials

New BioShocking Attack Tricks AI Browsers Into Leaking User Credentials Convince an AI browser that it is playing a game, and it can hand over your login details. That is

Codex in ChatGPT desktop app for Linux is now in preview

Codex in ChatGPT desktop app for Linux is now in preview Source: Hacker News

Nearly Half of LG Smart TV Apps Contain Residential Proxy SDKs

Nearly Half of LG Smart TV Apps Contain Residential Proxy SDKs Source: Hacker News