AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory

criticalnewsLLM-Specific

security

Source: The Hacker NewsJuly 29, 2026

Summary

Ruflo, an open-source platform for building multi-agent AI systems, had a critical vulnerability (CVE-2026-59726, CVSS score 10.0) that allowed unauthenticated attackers to run commands on exposed instances by sending HTTP requests to an unprotected port. Attackers could steal LLM API keys, read user conversations, and poison the AI system's memory (inject false patterns to manipulate how the AI responds) by exploiting this flaw in versions before 3.16.3.

Solution / Mitigation

Update to Ruflo version 3.16.3 or later. The patch changes the MCP bridge to bind to the loopback interface (localhost only) by default instead of all network interfaces, adds authentication controls for terminal execution, and enables MongoDB authentication. For systems running exposed instances, immediately close firewall ports 3001 and 27017, rotate all LLM API keys, audit the AgentDB pattern store for injected entries, and check MongoDB for signs of tampering.