CVE-2026-59726 - Ruflo: Unauthenticated RCE in MCP bridge default docker-compose deployment
CVE ID :CVE-2026-59726 Published : July 9, 2026, 6:16 p.m. | 15 minutes ago Description :Ruflo is an agent meta-harness for Claude Code and Codex. Prior to 3.16.3, ruflo's default docker-compose deployment exposed the MCP bridge POST /mcp and POST /mcp/:group endpoints without authentication,...