Ruflo

I don't have reliable information about "Ruflo" in the context of AI governance and compliance. Could you provide additional context about what Ruflo refers to? For example, is it a company, a regulatory framework, a technology platform, a research organization, or something else? With more details, I can write an accurate description that explains its relevance to enterprise AI governance.

1 item

ResearchGlobal2026-07-30

CVE-2026-59726: CVSS 10.0 Flaw in Ruflo Lets Attackers Seize AI Agents, Steal Credentials, and Poison Agent Memory Through a Single HTTP Request

Noma Security researchers discovered a critical unauthenticated vulnerability in the Ruflo open-source AI agent platform that exposes an MCP Bridge without authentication, granting attackers full control over enterprise AI environments. The flaw, tracked as CVE-2026-59726 with a perfect CVSS score of 10.0, enables code execution, API credential theft, and persistent AI memory poisoning in default deployments. Remediation requires firewall reconfiguration, full credential rotation, and manual audits of any agent memory stores that may have been tampered with.

Ruflo MCP vulnerability AI agent security AI memory poisoning LLM credential theft Noma Security agentic AI CVE-2026-59726