[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"focus:ruflo-mcp-flaw-lets-unauthenticated-attackers-run-commands-and-poison-ai-memory-ms8pwt1l":3},{"item":4},{"id":5,"title":6,"slug":7,"summary":8,"severity":9,"category":10,"cve_ids":11,"affected_products":13,"action_required":18,"article_ids":19,"ioc_summary":21,"source_urls":22,"status":24,"expires_at":25,"created_at":26,"updated_at":27,"articles":28},"897a1413-eff8-4459-a3c7-6f5cb7b55ab9","Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory","ruflo-mcp-flaw-lets-unauthenticated-attackers-run-commands-and-poison-ai-memory-ms8pwt1l","CVE-2026-59726 in Ruflo AI orchestration platform allows unauthenticated remote code execution via an exposed Model Context Protocol bridge. Attackers can steal API keys, access user conversations, and corrupt AI memory without any credentials. Any organization running Ruflo is immediately exploitable.","critical","advisory",[12],"CVE-2026-59726",[14,15,16,17],"Ruflo","Noma Security","Anthropic Claude Code","OpenAI Codex","Immediately identify and inventory all Ruflo deployments. Patch to the latest patched version or take affected instances offline. Scan for suspicious API key access, unusual conversation retrieval, and command execution logs dating back 30 days minimum.",[20],"90c53f28-938e-4e28-8940-b5f5a1c76a4c",null,[23],"https:\u002F\u002Fthehackernews.com\u002F2026\u002F07\u002Fruflo-mcp-flaw-lets-unauthenticated.html","active","2026-08-02T09:05:59.277+00:00","2026-07-31T09:06:06.069759+00:00","2026-07-31T09:13:49.285617+00:00",[29],{"id":20,"title":6,"url":23}]