Skip to content

CVE lookup

CVE-2026-59726

Pruva has a verified reproduction for CVE-2026-59726: Unauthenticated RCE in ruflo MCP bridge default docker-compose deployment. The canonical evidence record is REPRO-2026-00315.

REPRO

REPRO-2026-00315

Package

ruflo · npm

Severity

CRITICAL

Status

published