cve.now·· 2 小时前推荐指数67
CVE-2026-59726：Ruflo MCP桥默认部署未认证RCE，3.16.3已修复
CVE-2026-59726: Ruflo: Unauthenticated RCE in MCP bridge default docker-compose deployment (Update: public exploit published on Exploit-DB)
AI 导读
CVE-2026-59726披露Ruflo（面向Claude Code与Codex的agent meta-harness）默认docker-compose部署存在未认证RCE。
来源：cve.now · cve.now