Critical Ruflo Flaw Lets Attackers Hijack AI Agents and Steal API Keys
A CVSS 10.0 vulnerability (CVE‑2026‑59726) in Ruflo’s MCP bridge exposed unauthenticated POST /mcp endpoints, letting attackers execute commands, obtain a shell in the bridge container, read provider API keys, and poison the AgentDB learning store. All Ruflo releases before 3.16.3 are vulnerable; the issue is patched in version 3.16.3.