CVE-2026-59726: RufRoot: Unauthenticated RCE via an Exposed MCP Bridge Turns Agents Into Rogue Admins (CVSS 10.0)
CVE-2026-59726 is a critical-severity remote code execution issue (CVSS 10.0) in Unauthenticated, a MCP server.
Is Unauthenticated running on your developers' machines? Anomity finds every device with this MCP server installed, shows the version, and can block it by policy. Detect this across your developers' devices with Anomity →
Key facts
- ID
CVE-2026-59726- Aliases
- GHSA-c4hm-4h84-2cf3
- Severity
- critical
- CVSS score
- 10.0
- Attack type
- Remote code execution, Privilege escalation
- Component
- Unauthenticated · MCP server
- Known exploited
- No known exploitation
- Published
- Last verified
What is CVE-2026-59726?
Noma Labs found that Ruflo exposed an MCP bridge with no authentication, letting an unauthenticated attacker reach it directly and execute code with the privileges of the connected agent. Because the bridge is what agents call to reach their tools, control of it converts every connected agent into an administrative foothold. Rated CVSS 10.0 as CVE-2026-59726 (GHSA-c4hm-4h84-2cf3).
Am I affected by CVE-2026-59726?
You are affected if Unauthenticated is installed or configured on a machine. Check the references for the exact versions.
How do I fix CVE-2026-59726?
Patch Ruflo. Inventory every MCP bridge or gateway reachable on the network, confirm each requires authentication, and bind them to localhost unless there is a specific reason not to. An MCP bridge inherits the blast radius of every agent behind it.
How do I find every machine running Unauthenticated?
Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run Unauthenticated and which version, then enforce a policy on it.