# CVE-2026-59726: RufRoot: Unauthenticated RCE via an Exposed MCP Bridge Turns Agents Into Rogue Admins (CVSS 10.0)

> CVE-2026-59726 is a critical-severity remote code execution issue (CVSS 10.0) in Unauthenticated, a MCP server.

- **Canonical URL:** https://catalog.anomity.ai/vuln/cve-2026-59726
- **Aliases:** ti-063, GHSA-c4hm-4h84-2cf3
- **Severity:** critical
- **CVSS:** 10
- **Attack type:** Remote code execution, Privilege escalation
- **Component:** Unauthenticated (MCP server)
- **Exploited in the wild:** no known exploitation
- **Published:** 2026-07-29
- **Last verified:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/vuln/cve-2026-59726

## Summary

Noma Labs found that Ruflo exposed an MCP bridge with no authentication, letting an unauthenticated attacker reach it directly and execute code with the privileges of the connected agent. Because the bridge is what agents call to reach their tools, control of it converts every connected agent into an administrative foothold. Rated CVSS 10.0 as CVE-2026-59726 (GHSA-c4hm-4h84-2cf3).

## Affected versions

| Affected | Fixed in |
| --- | --- |
| see advisory | no fixed version listed |

## Am I affected by CVE-2026-59726?

You are affected if Unauthenticated is installed or configured on a machine. Check the references for the exact versions.

## How do I fix CVE-2026-59726?

Patch Ruflo. Inventory every MCP bridge or gateway reachable on the network, confirm each requires authentication, and bind them to localhost unless there is a specific reason not to. An MCP bridge inherits the blast radius of every agent behind it.

## How do I find every machine running Unauthenticated?

Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run Unauthenticated and which version, then enforce a policy on it.

## References

- article: https://noma.security/blog/rufroot-the-mcp-bridge-vulnerability-that-turns-agents-into-rogue-admins-cve-2026-59726/
- cve: https://nvd.nist.gov/vuln/detail/CVE-2026-59726
- advisory: https://github.com/advisories/GHSA-c4hm-4h84-2cf3

## Related vulnerabilities

- [CVE-2026-114612](https://catalog.anomity.ai/vuln/cve-2026-114612) — critical
- [CVE-2026-114090](https://catalog.anomity.ai/vuln/cve-2026-114090) — high
- [CVE-2025-49596](https://catalog.anomity.ai/vuln/cve-2025-49596) — critical
- [CVE-2026-32871](https://catalog.anomity.ai/vuln/cve-2026-32871) — critical
- [CVE-2026-96620](https://catalog.anomity.ai/vuln/cve-2026-96620) — critical
- [CVE-2026-105740](https://catalog.anomity.ai/vuln/cve-2026-105740) — critical

---

Source: Anomity Security Database (https://catalog.anomity.ai/vuln). Detect affected AI tools on developer devices: https://anomity.ai/?utm_source=catalog&utm_medium=vuln-md&utm_campaign=cve-2026-59726