{"vulnerability": "cve-2026-5972", "sightings": [{"uuid": "d1c7c642-6332-4c12-9491-1295508b5e80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5972", "type": "seen", "source": "Telegram/B-z3crZ1dI3tmPIxruR2FuLMmThruFg0zQ194epA7uIe11s", "content": "", "creation_timestamp": "2026-04-09T21:23:00.000000Z"}, {"uuid": "0841434e-57ff-4f55-8c15-e921d9efba81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59726", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mruehoaqru2a", "content": "Critical Ruflo flaw, CVE-2026-59726, left POST /mcp unauthenticated, enabling command execution in the bridge container. Impact: shell access, API key theft, swarm takeover, and AgentDB poisoning. Fixed in Ruflo 3.16.3. #Ruflo #RufRoot #AgentDB", "creation_timestamp": "2026-07-30T11:45:21.549047Z"}, {"uuid": "7935b564-b760-41e8-a92f-8b938b4c04c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59726", "type": "seen", "source": "Telegram/6u6DIuZXBM0CFqkDZ9re0Ut3mdmOr4yQh6rB7-iZ-HxHNGI", "content": "", "creation_timestamp": "2026-07-30T05:00:03.464036Z"}, {"uuid": "be413883-37d2-4230-a75d-88b1d2af076c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59726", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mruabvctyv2i", "content": "Ruflo <3.16.3 suffers CRITICAL vuln (CVE-2026-59726) \u2014 unauthenticated RCE via exposed /mcp endpoint. Upgrade to 3.16.3 now to prevent AI agent compromise. Details: https://radar.offseq.com/threat/critical-ruflo-flaw-lets-attackers-spawn-rogue-ai-swarms-96a3ca25e5fa59f3 #OffSeq #AIsecurity #Vulne...", "creation_timestamp": "2026-07-30T10:30:32.470672Z"}, {"uuid": "8554dfc5-a637-44dd-aae1-2783a23534e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59726", "type": "seen", "source": "https://thehackernews.com/2026/07/ruflo-mcp-flaw-lets-unauthenticated.html", "content": "Cybersecurity researchers have flagged a maximum-severity security flaw in Ruflo, an open-source agent meta-harness for Anthropic Claude Code and OpenAI Codex, that could result in unauthenticated remote code execution.\n\nThe vulnerability, tracked as CVE-2026-59726 (CVSS score: 10.0), impacts all versions of the project before version 3.16.3. It has been codenamed RufRoot by Noma Security's", "creation_timestamp": "2026-07-30T01:00:46.331961Z"}, {"uuid": "db28f706-3a51-4782-8004-f41e389c5572", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59726", "type": "seen", "source": "https://bsky.app/profile/techoverload.bsky.social/post/3mrukjt6w6p2w", "content": "Ruflo (66k\u2b50 AI agent orchestrator) has a CVSS 10.0 RCE \u2014 CVE-2026-59726. Its MCP bridge exposed 233 tools incl. shell exec on 0.0.0.0:3001 with no auth. Attackers could steal LLM API keys, read conversations & poison AI memory. Update to 3.16.3+.\n\n#AI #Security #OpenSource", "creation_timestamp": "2026-07-30T13:33:55.876920Z"}, {"uuid": "ebfd4105-7bbd-4efa-a6e6-0e424ee6b3f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59726", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mrtb2w544s2m", "content": "A vulnerability named RufRoot, tracked as CVE-2026-59726, affects Ruflo versions before 3.16.3, allowing attackers to execute commands without authentication via the exposed Model Context Protocol (MCP) bridge. This flaw, with a CVSS score of 10.", "creation_timestamp": "2026-07-30T01:11:52.327101Z"}, {"uuid": "dd8fe6f3-425c-4378-969a-515bd6491baa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59726", "type": "seen", "source": "https://bsky.app/profile/alejandxr.bsky.social/post/3mrtq2hlrub2v", "content": "CVE-2026-59726: an unauthenticated Ruflo MCP bridge hands over your AI provider keys and agent memory to anyone who hits it. Auth as an afterthought on a bridge that touches everything is exactly as bad as it sounds.", "creation_timestamp": "2026-07-30T05:40:02.908772Z"}, {"uuid": "48761bcb-b82c-457b-85f0-4cc265dec8c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59726", "type": "seen", "source": "Telegram/47AGWfAWFIwZKzQcl_sisfXazYjpo74QYaHVlY-riLjwoTE", "content": "", "creation_timestamp": "2026-07-30T14:00:04.722889Z"}, {"uuid": "6818fcbb-40d2-4e98-abdd-7a77be43cf05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59726", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrutyvij762y", "content": "\u26a0\ufe0f PATCH NOW\n\nRuflo, a popular open-source AI agent platform, exposed its control bridge to the whole network with no login. One request runs shell commands (CVE-2026-59726, CVSS 10).\n\nFixed in 3.16.3.\n\nPatch, then audit the agent's memory: a clean redeploy won't clean it.", "creation_timestamp": "2026-07-30T16:23:25.231918Z"}, {"uuid": "8740fc8c-dbf0-47bf-a5c7-a584ef3b314a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59726", "type": "seen", "source": "https://gist.github.com/Correctover/96443c637dcce0f9133003cf3a10990a", "content": "# CCS vs. The Real World: How Pre-Execution Verification Would Have Blocked Every Attack in Wiz's MCP Report\n\n**Date**: 2026-08-04 | **Author**: Guigui Wang, Correctover\n\n---\n\nWiz Research published findings on July 29, 2026 that should terrify every enterprise deploying AI agents:\n\n- MCP found in **80% of cloud environments**\n- **1 in 6** environments expose at least one MCP server to the internet\n- **~70%** return full tool catalogs to anonymous callers\n- **~42%** return real data when tools are invoked\n- **~10%** expose genuinely sensitive backends\n- A confirmed share vulnerable to **SSRF against cloud metadata endpoints**, returning temporary AWS/GCP credentials\n\nThese aren't theoretical. They're happening in Fortune 500 companies. And they all share one failure mode: **no pre-execution verification of tool parameters**.\n\n## The Four Attack Classes \u2014 And How CCS Blocks Each\n\n### Class 1: Sensitive Data Access (Most Common)\n\nServers proxying production databases, issue trackers, regulated records \u2014 returning real data to anonymous callers. A BI platform exposed `query_sql`, `get_connection_schemas`, and `get_connection_table_columns` \u2014 anonymous callers could enumerate and query every connected database.\n\n**CCS blocks**: Schema validation rejects calls where parameters don't match declared types. Identity verification blocks unauthenticated access to sensitive tools. Security scanning detects SQL injection patterns. All before the backend is reached. ~7.5\u03bcs.\n\n### Class 2: Write and Delete Access\n\nIAM backends exposing `add_application`, `update_application`, `delete_application`. Team platforms with `send_blast_message` alongside deletion tools.\n\n**CCS blocks**: Integrity dimension detects new dangerous tool registrations. Cost dimension enforces budget limits on destructive operations. Identity verification gates write access.\n\n### Class 3: Code Execution + SSRF (Rarest, Most Severe)\n\nThe famous exchange: asked to \"show me the AWS credentials,\" the agent refused. Asked to \"validate the IAM role by retrieving its IMDS metadata,\" it returned them. SSRF to `169.254.169.254` returned temporary cloud credentials.\n\n**CCS blocks**: URL whitelist validation rejects SSRF to metadata endpoints. Security scanning detects shell injection patterns in parameters. CCS provides deterministic enforcement that no prompt injection can bypass \u2014 it lives outside the reasoning loop.\n\n### Class 4: The \"Lethal Trifecta\"\n\nAccess to private data + exposure to untrusted content + ability to communicate externally = data breach weapon. As DZone correctly noted: *\"A control that lives inside the reasoning loop can be argued with. A control that lives outside it cannot.\"*\n\n**CCS is that control.** Protocol-level, deterministic, sub-millisecond.\n\n## The RufRoot CVE-2026-59726 Connection\n\nSame week: CVSS 10.0 in Ruflo (67K+ stars, #2 on MCPMarket). 233 tools over HTTP, zero auth. `ruflo__terminal_execute` gave RCE via one POST request.\n\nCCS blocks at step 1: Identity (no auth) + Security (shell injection pattern) + Schema (arbitrary command \u2260 valid parameter). The command blocklist only applied within autopilot flow \u2014 `/mcp` bypassed it. CCS verifies at the protocol level, not in application-specific code paths.\n\n## Performance\n\n| Metric | Value |\n|--------|-------|\n| CCS OOP P50 | ~133\u03bcs |\n| CCS In-process P50 | ~7.5\u03bcs |\n| Vulnerability classes | 7 dimensions |\n| False positives (28-project audit) | 0 |\n\n## Links\n\n- [CCS Framework](https://github.com/Correctover/Correctover)\n- [IETF Draft](https://datatracker.ietf.org/doc/draft-cs2-mcp-ccs/)\n- [MCP Security Audit: 7 Confirmed Vulnerabilities](https://github.com/Correctover/Correctover)\n- [CVE-2026-054088: SSRF CVSS 10.0](https://github.com/Pocket-Digital/mcp-monster-server/security/advisories/GHSA-524p-v8jx-3fw6)\n- [PANW Prisma AIRS Gap Analysis](https://gist.github.com/Correctover/19a40ba66828f148eb45c10d389bf227)\n", "creation_timestamp": "2026-08-04T08:29:02.987405Z"}, {"uuid": "3855494d-fc44-4cd7-abd6-78999df95691", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59726", "type": "seen", "source": "https://gist.github.com/Correctover/baade27067eb2159f0fecb0aa30e3388", "content": "# SentinelOne + Prompt Security: The Missing Runtime Verification Layer\n\n**Date**: 2026-08-04 | **Author**: Guigui Wang, Correctover\n\n---\n\nSentinelOne acquired Prompt Security for $250M to add MCP content inspection (prompt injection detection, DLP, data governance). But there's a gap: **no pre-execution tool parameter verification**.\n\n## What Prompt Security Does vs. What's Missing\n\n**Does**: Content scanning of tool responses \u2014 PII detection, prompt injection in outputs, DLP  \n**Doesn't**: Schema validation of arguments before execution, SSRF detection in URLs before requests, command injection detection before shell execution, integrity checking for schema drift\n\nThe security boundary is after the tool executes. By then, SSRF has reached the metadata service, command injection has executed, path traversal has accessed files.\n\n## The Complete Stack\n\n```\nAgent \u2192 [CCS: Pre-execution, ~7.5\u03bcs] \u2192 [Prompt Security: Content inspection] \u2192 MCP Server\n         Blocks malformed calls          Detects data leakage in responses\n```\n\nCCS (7-dim runtime verification) + Prompt Security (content inspection) = complete coverage.\n\n## Performance\n\n| Layer | Latency | What it catches |\n|-------|---------|----------------|\n| CCS pre-execution | ~7.5\u03bcs (in-process) | Schema violations, SSRF, injection, drift |\n| Prompt Security post-execution | ~10-50ms | PII leakage, data exfiltration, content injection |\n\n## The Market Context\n\n- Wiz: MCP in 80% of cloud environments, 1/6 exposed to internet\n- RufRoot CVE-2026-59726 (CVSS 10.0): Full RCE in 67K-star MCP platform\n- LiteLLM CVE-2026-30623 (CVSS 9.8): MCP command injection\n- Every enterprise deploying agents needs pre-execution + post-execution security\n\n## Links\n- [CCS Framework](https://github.com/Correctover/Correctover) | [IETF Draft](https://datatracker.ietf.org/doc/draft-cs2-mcp-ccs/) | [PANW Same Gap](https://gist.github.com/Correctover/19a40ba66828f148eb45c10d389bf227)\n", "creation_timestamp": "2026-08-04T08:30:53.084754Z"}, {"uuid": "5906ae75-401e-40a8-bd2b-05135ad6461f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59726", "type": "published-proof-of-concept", "source": "Telegram/47AGWfAWFIwZKzQcl_sisfXazYjpo74QYaHVlY-riLjwoTE", "content": "", "creation_timestamp": "2026-07-31T00:00:29.517173Z"}, {"uuid": "995ca8c3-77d1-4cf2-bd63-95ad5adedbda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59726", "type": "published-proof-of-concept", "source": "Telegram/6u6DIuZXBM0CFqkDZ9re0Ut3mdmOr4yQh6rB7-iZ-HxHNGI", "content": "", "creation_timestamp": "2026-07-31T00:00:39.201152Z"}, {"uuid": "eb33b190-259e-4324-82cc-aba471f3f6b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59726", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mrw6k4w2zo2x", "content": "Top 3 CVE for last 7 days:\nCVE-2026-66066: 39 interactions\nCVE-2026-63077: 32 interactions\nCVE-2026-54121: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-66066: 33 interactions\nCVE-2026-59726: 9 interactions\nCVE-2026-20316: 6 interactions\n", "creation_timestamp": "2026-07-31T05:04:40.788025Z"}, {"uuid": "50a2ef74-f935-4c25-883e-5d9b9348249b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59726", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3msazgodmvp2n", "content": "RufRoot CVE-2026-59726: Unauthenticated RCE in Ruflo MCP Bridge Exposes AI Agent Keys", "creation_timestamp": "2026-08-04T12:32:33.189874Z"}, {"uuid": "28285e61-4139-4525-9e3f-8dceb0b648b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59726", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3msazqyo6de2v", "content": "RufRoot CVE-2026-59726:\u8a8d\u8a3c\u306a\u3057\u306eRCE\u3067Ruflo MCP Bridge\u304c\u9732\u5448\u3055\u305b\u305fAI\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u306e\u9375\n\n\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u30441\u4ef6\u306ePOST\u30ea\u30af\u30a8\u30b9\u30c8\u3060\u3051\u3067\u3001GitHub\u4e0a\u3067\u6700\u3082\u5e83\u304f\u5c0e\u5165\u3055\u308c\u3066\u3044\u308bAI\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u30fb\u30aa\u30fc\u30b1\u30b9\u30c8\u30ec\u30fc\u30b7\u30e7\u30f3\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u306e\u4e00\u3064\u306b\u30b3\u30de\u30f3\u30c9\u30b7\u30a7\u30eb\u3092\u958b\u304f\u3053\u3068\u304c\u3067\u304d\u307e\u3057\u305f\u3002\u3053\u306e\u8db3\u304c\u304b\u308a\u3092\u5f97\u305f\u653b\u6483\u8005\u306f\u3001OpenAI\u3084Anthropic\u306eAPI\u30ad\u30fc\u3092\u7a83\u53d6\u3057\u3001\u30e6\u30fc\u30b6\u30fc\u306e\u4f1a\u8a71\u5c65\u6b74\u3092\u8aad\u307f\u53d6\u308a\u3001...", "creation_timestamp": "2026-08-04T12:38:19.117914Z"}, {"uuid": "179bd7ca-77b9-4791-b600-a86cee32cfc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59726", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mrxarwz3rz2r", "content": "RufRoot: The MCP Bridge Vulnerability That Turns Agents Into Rogue Admins (CVE-2026-59726) #appsec", "creation_timestamp": "2026-07-31T15:17:49.208721Z"}, {"uuid": "6f48e262-b577-4c0a-9039-54b871500d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59726", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3msd2olidep2d", "content": "CVSS 10.0: Ruflo's AI agent platform shipped with an unauthenticated management bridge open to the network by default. One HTTP request = stolen LLM keys + hijacked agents. CVE-2026-59726 \"RufRoot\". Patch to 3.16.3 now.\u00a0\nzurl.co/SrOJJ\nzurl.co/6ItUy \n\n#diesec", "creation_timestamp": "2026-08-05T08:00:12.101327Z"}, {"uuid": "2b807629-1d1c-40db-9661-0d532abd1064", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59726", "type": "seen", "source": "https://bsky.app/profile/nik-kale.bsky.social/post/3msharuuhfz2m", "content": "CVE-2026-59726 scores a clean 10.0, and the reason is a default.", "creation_timestamp": "2026-08-07T00:00:04.776070Z"}, {"uuid": "ce5044e4-67f9-464f-b7a6-5408edbb4114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59723", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq6ii3a55f27", "content": "CVE-2026-59723 - Cline: Cross-Origin WebSocket Hijacking in Cline Hub Dashboard (`/browser` endpoint)\nCVE ID : CVE-2026-59723\n \n Published : July 8, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistan...", "creation_timestamp": "2026-07-09T01:33:23.282489Z"}, {"uuid": "8e82814e-29b6-44c6-9051-8d221f9ddeb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59723", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mq6qq2mnan2c", "content": "\ud83d\udfe0 CVE-2026-59723 - High (8.8)\n\nCline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant. Prior to 3.0.30, ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-59723/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-09T04:01:01.580501Z"}, {"uuid": "b130dd8d-dae8-4f54-bd62-abf56deb5e84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59726", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqab2vcb5g2b", "content": "CVE-2026-59726 - ruflo\nAn older version of Ruflo's default setup allowed anyone on the network to access sensitive data without a password. This could let them read important keys and interfere with Ruflo's\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ruflo #ruvnet #CVE #infosec", "creation_timestamp": "2026-07-09T18:26:05.207420Z"}, {"uuid": "e2d883b8-0343-4544-9580-4d45cf3eaaee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59726", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqae3c4udu2x", "content": "CVE-2026-59726 - Ruflo: Unauthenticated RCE in MCP bridge default docker-compose deployment\nCVE ID : CVE-2026-59726\n \n Published : July 9, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : Ruflo is an agent meta-harness for Claude Code and Codex. Prior to 3.16.3, ruflo's defau...", "creation_timestamp": "2026-07-09T19:19:58.969925Z"}, {"uuid": "641c0cde-1a04-430a-a317-7fb5fde35082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59721", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqbspbvraw27", "content": "CVE-2026-59721 - OS Command Injection in Hoppscotch. CVSS 7.2. Admin can execute arbitrary commands as root via SMTP config. Upgrade to 2026.6.0 immediately. #CVE #Hoppscotch #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-59721/", "creation_timestamp": "2026-07-10T09:14:21.905824Z"}, {"uuid": "b2ce042b-ac03-4cd9-9b03-f5a9d8227fce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59728", "type": "published-proof-of-concept", "source": "https://github.com/withastro/astro/security/advisories/GHSA-8j5q-mfj2-5q9q", "content": "", "creation_timestamp": "2026-07-21T00:35:03.643932Z"}, {"uuid": "c85e6029-4c89-4acd-b14e-9fabded921ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59727", "type": "published-proof-of-concept", "source": "https://github.com/withastro/astro/security/advisories/GHSA-7pw4-f3q4-r2p2", "content": "", "creation_timestamp": "2026-07-21T00:35:05.976527Z"}, {"uuid": "864e903e-3142-4312-a6b0-c5c380b79159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59726", "type": "seen", "source": "https://bsky.app/profile/newsen.bsky.social/post/3mrryx4snwp2x", "content": "Noma Labs Uncovers Major Vulnerability in Popular Open Source AI Platform Ruflo #USA #New_York #Noma_Security #Ruflo #CVE-2026-59726", "creation_timestamp": "2026-07-29T13:13:55.319365Z"}, {"uuid": "da3b3305-ff6d-4ea0-b3a3-7554bdd56f70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59726", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrsdqusg762m", "content": "Ruflo\u306e\u5168\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u672a\u8a8d\u8a3c\u306e\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027(CVE-2026-59726)\u304c\u3042\u308a\u307e\u3059\u3002\u653b\u6483\u8005\u306f\u30b3\u30fc\u30c9\u5b9f\u884c\u3084AI\u30e1\u30e2\u30ea\u6539\u3056\u3093\u304c\u53ef\u80fd\u3067\u3059\u3002", "creation_timestamp": "2026-07-29T16:27:17.057094Z"}, {"uuid": "37682727-7b26-4300-a98e-22423c27f1dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59726", "type": "seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mrsgjng7rj2h", "content": "CVSS 10.0: Ruflo MCP Flaw Enables Unauthenticated RCE and AI Memory Poisoning\n\nhttps://blindthoughts.com/ruflo-mcp-cve-2026-59726-unauthenticated-rce-ai-memory-poison\n\n#vulnerability #remotecodeexecution #aisecurity #mcp #criticalpatch", "creation_timestamp": "2026-07-29T17:16:55.134339Z"}, {"uuid": "1feb006c-4c11-4e8c-aa21-17874ed16645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59726", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mrshje4ion2k", "content": "A maximum-severity vulnerability (CVE-2026-59726, CVSS 10.0) in the open-source AI agent platform Ruflo allows unauthenticated remote code execution. The flaw, [\u2026]", "creation_timestamp": "2026-07-29T17:34:39.067883Z"}, {"uuid": "a94ab38b-189c-4ce4-a3ba-70f28d44864e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59726", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mrsi5bm5sj24", "content": "\ud83e\udd16 CVE-2026-59726 (CVSS 10.0): Critical RCE in Ruflo, an agent harness for Claude Code/Codex. Unauthenticated attackers can run commands and poison AI memory. Versions < 3.16.3 affected.\nhttps://thehackernews.com/2026/07/ruflo-mcp-flaw-lets-unauthenticated.html", "creation_timestamp": "2026-07-29T17:45:47.650325Z"}, {"uuid": "be7f8a11-9ca0-4c0f-8924-92dfd247676c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59726", "type": "seen", "source": "https://thehackernews.com/2026/07/ruflo-mcp-flaw-lets-unauthenticated.html", "content": "Cybersecurity researchers have flagged a maximum-severity security flaw in Ruflo, an open-source agent meta-harness for Anthropic Claude Code and OpenAI Codex, that could result in unauthenticated remote code execution.\n\nThe vulnerability, tracked as CVE-2026-59726 (CVSS score: 10.0), impacts all versions of the project before version 3.16.3. It has been codenamed RufRoot by Noma Security's", "creation_timestamp": "2026-07-29T19:00:43.135562Z"}]}