#CVE-2026-59726

Unauthenticated attackers can execute commands and poison AI memory via Ruflo MCP flaw

A critical flaw in the Ruflo agent meta-harness allows unauthenticated attackers to execute commands via its MCP bridge.