{
  "entry": {
    "kind": "vuln",
    "slug": "cve-2026-59726",
    "name": "CVE-2026-59726",
    "vendor": "Unauthenticated",
    "description": "Noma Labs found that Ruflo exposed an MCP bridge with no authentication, letting an unauthenticated attacker reach it directly and execute code with the privileges of the connected agent. Because the bridge is what agents call to reach their tools, control of it converts every connected agent into an administrative foothold. Rated CVSS 10.0 as CVE-2026-59726 (GHSA-c4hm-4h84-2cf3).",
    "website": "https://noma.security/blog/rufroot-the-mcp-bridge-vulnerability-that-turns-agents-into-rogue-admins-cve-2026-59726/",
    "repository": null,
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "advisory",
    "capabilities": [],
    "packaging": null,
    "configFiles": null,
    "category": "mcp-server",
    "updatedAt": "2026-07-29",
    "risk": {
      "score": 100,
      "band": "critical",
      "signals": [],
      "dangerousCombos": []
    },
    "dangerousCombos": [],
    "vuln": {
      "id": "CVE-2026-59726",
      "aliases": [
        "ti-063",
        "GHSA-c4hm-4h84-2cf3"
      ],
      "title": "RufRoot: Unauthenticated RCE via an Exposed MCP Bridge Turns Agents Into Rogue Admins (CVSS 10.0)",
      "summary": "Noma Labs found that Ruflo exposed an MCP bridge with no authentication, letting an unauthenticated attacker reach it directly and execute code with the privileges of the connected agent. Because the bridge is what agents call to reach their tools, control of it converts every connected agent into an administrative foothold. Rated CVSS 10.0 as CVE-2026-59726 (GHSA-c4hm-4h84-2cf3).",
      "severity": "critical",
      "cvss": {
        "score": 10,
        "vector": null,
        "version": null
      },
      "cwe": [],
      "attackType": [
        "Remote code execution",
        "Privilege escalation"
      ],
      "componentType": "mcp-server",
      "component": {
        "name": "Unauthenticated",
        "vendor": null,
        "package": null,
        "ecosystem": null,
        "catalogSlug": null
      },
      "affected": [
        {
          "range": null,
          "fixed": null
        }
      ],
      "exploited": false,
      "exploitPublic": false,
      "publishedAt": "2026-07-29",
      "modifiedAt": "2026-07-29",
      "lastVerified": "2026-11-01",
      "references": [
        {
          "type": "article",
          "url": "https://noma.security/blog/rufroot-the-mcp-bridge-vulnerability-that-turns-agents-into-rogue-admins-cve-2026-59726/"
        },
        {
          "type": "cve",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59726"
        },
        {
          "type": "advisory",
          "url": "https://github.com/advisories/GHSA-c4hm-4h84-2cf3"
        }
      ],
      "mitigation": "Patch Ruflo. Inventory every MCP bridge or gateway reachable on the network, confirm each requires authentication, and bind them to localhost unless there is a specific reason not to. An MCP bridge inherits the blast radius of every agent behind it.",
      "detectedByAnomity": true
    }
  }
}