Noma Security

Noma Security is a cybersecurity firm specializing in AI and machine learning security solutions, with particular focus on protecting organizations' AI systems from adversarial attacks and data poisoning threats. For enterprise AI governance, Noma Security matters because organizations deploying AI models face unique security risks that traditional cybersecurity tools don't adequately address, requiring specialized expertise to ensure model integrity and prevent malicious manipulation. Their work supports compliance efforts by helping enterprises demonstrate that their AI systems meet security and trustworthiness standards expected by regulators and stakeholders.

1 item

ResearchGlobal2026-07-30

CVE-2026-59726: CVSS 10.0 Flaw in Ruflo Lets Attackers Seize AI Agents, Steal Credentials, and Poison Agent Memory Through a Single HTTP Request

Noma Security researchers discovered a critical unauthenticated vulnerability in the Ruflo open-source AI agent platform that exposes an MCP Bridge without authentication, granting attackers full control over enterprise AI environments. The flaw, tracked as CVE-2026-59726 with a perfect CVSS score of 10.0, enables code execution, API credential theft, and persistent AI memory poisoning in default deployments. Remediation requires firewall reconfiguration, full credential rotation, and manual audits of any agent memory stores that may have been tampered with.

Ruflo MCP vulnerability AI agent security AI memory poisoning LLM credential theft Noma Security agentic AI CVE-2026-59726