03:14
2026-07-31
dev.to
ai-safety
RufRoot (CVE-2026-59726): Full Compromise of AI Agent Infrastructure via Unauthenticated MCP Bridge
A security researcher has disclosed CVE-2026-59726, a critical vulnerability in Ruflo's MCP Bridge that allows unauthenticated attackers to execute commands inside the container, steal LLM API keys, aβ¦