Critical Ruflo flaw lets attackers hijack AI agents through exposed MCP bridge
Summary
A critical vulnerability (CVE-2026-59726, called RufRoot) in the open-source Ruflo AI agent platform allows unauthenticated attackers to take complete control of enterprise AI systems by exploiting an exposed MCP bridge (Model Context Protocol, a system that lets AI agents interact with external tools and data). The flaw affects Ruflo versions before 3.16.3 and has a maximum severity score of 10.0, enabling attackers to execute arbitrary code, steal API keys, hijack AI agents, and manipulate the platform's memory through a single HTTP request.
Solution / Mitigation
Upgrade to Ruflo version 3.16.3 or later, which addresses the vulnerability.
Classification
Affected Vendors
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2026-34371: LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the e
Original source: https://www.csoonline.com/article/4203408/critical-ruflo-flaw-lets-attackers-hijack-ai-agents-through-exposed-mcp-bridge.html
First tracked: July 30, 2026 at 02:01 PM
Classified by LLM (prompt v3) · confidence: 95%