CVE-2026-59726 — Ruflo — Fixed in 3.16.3

Critical10.0 Published on Jul 9, 2026

Ruflo is an agent meta-harness for Claude Code and Codex. Prior to 3.16.3, ruflo's default docker-compose deployment exposed the MCP bridge POST /mcp and POST /mcp/:group endpoints without authentication, allowing an unauthenticated network attacker to invoke tools/call to terminal_execute, obtain a shell in the bridge container, read provider API keys, and poison AgentDB learning-store patterns. This issue is fixed in version 3.16.3.

Fixed versions

Choose the version for your installed product and release branch.

Product	Fixed versions
Ruflo	3.16.3

Versions stated in the NVD description

CVSS score10.0 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness type (CWE)CWE-78, CWE-306, CWE-942

RufRoot: Critical Vulnerability (CVSS 10.0) in Ruflo Opens Remote Shell Without Authentication

A critical vulnerability, CVE-2026-59726, in Ruflo allows unauthenticated remote shell execution. Update to version 3.16.3 to secure your AI platform.

Jul 29, 202621:12 3 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Fixed versions

Related articles

RufRoot: Critical Vulnerability (CVSS 10.0) in Ruflo Opens Remote Shell Without Authentication