Skip to content
OpenAdvisories

Vendor

ruvnet

4 known vulnerabilities.

Products

sublinear-time-solver 2 ruflo 1 agentic-flow 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2026-59726 Public exploit

    Ruflo: Unauthenticated RCE in MCP bridge default docker-compose deployment

    Ruflo is an agent meta-harness for Claude Code and Codex. Prior to 3.16.3, ruflo's default docker-compose deployment exposed the MCP bridge POST /mcp and POST /mcp/:group endpoints without authentication, allowing an unauthenticated network attacker to invoke…

    ruvnet ruflo