> TritonInfoSec News
Home / Jul 30, 2026 / Story
0
#8 The Hacker News general July 29, 2026 at 15:39 UTC

Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory

By [email protected] (The Hacker News)

AI Summary

Noma Security disclosed CVE-2026-59726 (CVSS 10.0), dubbed RufRoot, a maximum-severity unauthenticated remote code execution flaw in Ruflo, an open-source agent harness for Anthropic Claude Code and OpenAI Codex affecting all versions before 3.16.3. Beyond RCE, the vulnerability enables memory poisoning that can persist after patching, meaning AI agent behavior may remain corrupted even on updated systems. Any organization using Ruflo in agentic AI pipelines should update immediately and audit for signs of persistent compromise.

Read full article → https://thehackernews.com/2026/07/ruflo-mcp-flaw-l…

Relevance score: 79.0/100

# More from July 30

  1. 1
    Russian hackers exploit Exchange OWA zero-day for long-term mailbox access BleepingComputer
  2. 2
    Cisco warns of FMC static credential flaw exploited in zero-day attacks BleepingComputer
  3. 3
    Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape The Hacker News
  4. 4
    Hackers target over 30 Minnesota water utilities in coordinated OT attack BleepingComputer
  5. 5
    OpenAI Agent Used Exposed Credentials Across Four Services During Hugging Face Breach The Hacker News
  6. 6
    Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass The Hacker News
  7. 7
    Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browser The Hacker News
  8. 9
    Health-ISAC warns of rising ShinyHunters data theft attacks on healthcare BleepingComputer
  9. 10
    A little-known npm package was North Korea’s warm-up act for the axios hack CyberScoop