Skip to content
OpenAdvisories

Vendor

ruvnet

4 known vulnerabilities.

Products

sublinear-time-solver 2 ruflo 1 agentic-flow 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-55609

    sublinear-time-solver: Arbitrary file write in consciousness-explorer / sublinear-time-solver MCP export_state

    sublinear-time-solver is a Rust and WebAssembly library for solving asymmetric diagonally dominant systems in sublinear time. Prior to consciousness-explorer 1.1.2 and sublinear-time-solver 1.6.0, the export_state and import_state tools in src/consciousness-e…

    ruvnet sublinear-time-solver sublinear-time-solver consciousness-explorer npm
  • High 8.8
    CVE-2026-58195

    Agentic-Flow: OS Command Injection in agentic-flow MCP server tools via unsanitized tool-parameter interpolation into execSync

    Agentic-Flow is an AI agent orchestration platform. Prior to 2.0.14, agentic-flow MCP server tools in src/mcp/standalone-stdio.ts, src/mcp/fastmcp/servers/claude-flow-sdk.ts, src/mcp/fastmcp/servers/stdio-full.ts, src/mcp/fastmcp/servers/http-streaming-update…

    ruvnet agentic-flow agentic-flow npm