A major security flaw in the open-source platform Ruflo has been discovered, providing unauthorized actors the ability to execute arbitrary commands within its environment. Noma Labs researchers have identified the flaw, designated as CVE-2026-59726, with a perfect CVSS score of 10. This vulnerability is found in the Model Context Protocol (MCP) bridge component of Ruflo's docker-compose.yml file.
The MCP bridge is a central hub for agent interactions, enabling critical operations such as shell access, database management, and memory control. The security issue stems from its default configuration, which dangerously binds the MCP bridge and MongoDB to all network interfaces, thereby exposing the system to remote attacks.
Exploiting this vulnerability enables attackers to conduct reconnaissance, execute remote code, steal sensitive data like API keys, deploy backdoors, and erase evidence of their activities. Ruflo maintainers have addressed the issue in version 3.16.3, providing users with instructions to secure their systems.
Organizations using Ruflo must update to the latest version and carefully review their deployment configurations to prevent exploitation. Noma Labs has named the vulnerability RufRoot, highlighting its critical role in the platform as all agent actions pass through the MCP bridge, making it a prime target for attackers.