CVE-2026-59726

criticalCVSS 10covered by 1 sourcefirst seen 2026-07-09

Ruflo is an agent meta-harness for Claude Code and Codex. Prior to 3.16.3, ruflo's default docker-compose deployment exposed the MCP bridge POST /mcp and POST /mcp/:group endpoints without authentication, allowing an unauthenticated network attacker to invoke tools/call to terminal_execute, obtain a shell in the bridge container, read provider API keys, and poison AgentDB learning-store patterns. This issue is fixed in version 3.16.3.

⚡ Watch CVE-2026-59726

Get an email if CVE-2026-59726 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Low exploitation risk0.44% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 36% of all EPSS-scored CVEs.

Advisory coverage (1)

criticalCVE-2026-59726: Ruflo is an agent meta-harness for Claude Code and Codex. Prior to 3.16.3, ruflo's default doc…nvd · 2026-07-09

External references

NVD record for CVE-2026-59726

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-59726 status](https://www.csirts.com/badge/CVE-2026-59726)](https://www.csirts.com/cve/CVE-2026-59726)