Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-02 · source-backed
Noma Labs disclosed that Ruflo's built-in MCP Bridge exposed 233 tools: including terminal_execute: over an unauthenticated HTTP endpoint on port 3001, bound to 0.0.0.0 by default in the shipped docker-compose. One POST to /mcp gets you shell inside the container, then provider API keys, conversation history, and the ability to poison AgentDB learning-store patterns. A command blocklist existed but applied only to the autopilot flow, not the /mcp endpoint. Disclosed June 30, patched in 3.16.3 within 24 hours. Go check what your agent harness binds to.
Each link below shares sources, entities, or timing with this story.
ruflo supports Claude Code / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (ruflo supports Claude Code); both cover CVE, RCE; overlapping topics (agent, command).
ruflo supports MCP / Shared entities / Earlier coverage
Linked by a graph relationship (ruflo supports MCP); both cover CVE, HTTP; earlier CVE coverage from 2026-06-29.
ruflo uses Claude / Shared entities / Earlier coverage
Linked by a graph relationship (ruflo uses Claude); both cover CVSS, RCE; earlier CVSS coverage from 2026-03-25.
ruflo supports Claude Code / Shared entities / Earlier coverage
Linked by a graph relationship (ruflo supports Claude Code); both cover CVE, CVSS; earlier CVE coverage from 2026-03-15.
ruflo supports Codex / Shared entity: CVE / Same source domain / Earlier coverage
Linked by a graph relationship (ruflo supports Codex); both cover CVE; reported by the same outlet (noma.security).
ruflo supports Codex / Shared entity: CVE / Shared topic / Earlier coverage
Linked by a graph relationship (ruflo supports Codex); both cover CVE; overlapping topics (agent, command).
ruflo supports MCP / Shared entities / Earlier coverage / Tension
Linked by a graph relationship (ruflo supports MCP); both cover CVE, CVSS, HTTP, RCE; earlier CVE coverage from 2026-03-23.
Noma Labs criticizes ruflo / Shared entity: Ruflo / Shared topic / Earlier coverage
Linked by a graph relationship (Noma Labs criticizes ruflo); both cover Ruflo; overlapping topics (agent, built-in).