{"type":"post","id":"public-exploit-published-for-unauthenticated-rce-in-ruflo-c3ef96","slug":"public-exploit-published-for-unauthenticated-rce-in-ruflo-c3ef96","title":"Public exploit published for unauthenticated RCE in Ruflo MCP Bridge 3.16.2","description":"Ruflo’s GitHub security advisory says its MCP bridge in the default Docker Compose deployment allowed unauthenticated network attackers to execute commands, expose provider keys and tamper with the AgentDB learning store.","retrieval_nugget":"Ruflo’s GitHub security advisory says its MCP bridge in the default Docker Compose deployment allowed unauthenticated network attackers to execute commands, expose provider keys and tamper with the AgentDB learning store. Versions before 3.16.3 are affected; the advisory says the fix binds to loopback by default and adds authentication and execution controls.","published_at":"2026-11-11","updated_at":"2026-11-11","record_date":"2026-11-11","date_kind":"published_at","topics":["mcp","github"],"entities":["Ruflo","ruvnet","MCP","AgentDB"],"related_patterns":["agent-security-moves-to-runtime-boundaries"],"novelty_label":"new_fact","what_changed":"A newly disclosed Ruflo MCP bridge vulnerability exposes its default Docker Compose deployment to unauthenticated remote code execution; versions before 3.16.3 are affected.","prior_refs":["https://newruntime.com/posts/ibm-bulletin-langflow-oss-1-0-0-1-7c4fe2/","https://newruntime.com/posts/cve-2026-62863-moling-mcp-server-sse-mode-56514d/"],"source_url":"https://github.com/ruvnet/ruflo/security/advisories/GHSA-c4hm-4h84-2cf3","source_urls":["https://github.com/ruvnet/ruflo/security/advisories/GHSA-c4hm-4h84-2cf3"],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"post:public-exploit-published-for-unauthenticated-rce-in-ruflo-c3ef96","status":"published","visuals":[],"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"routes":{"html":"https://newruntime.com/posts/public-exploit-published-for-unauthenticated-rce-in-ruflo-c3ef96/","markdown":"https://newruntime.com/posts/public-exploit-published-for-unauthenticated-rce-in-ruflo-c3ef96.md","json":"https://newruntime.com/posts/public-exploit-published-for-unauthenticated-rce-in-ruflo-c3ef96.json"},"markdown_url":"https://newruntime.com/posts/public-exploit-published-for-unauthenticated-rce-in-ruflo-c3ef96.md","next_reads":[{"type":"topic","path":"/topics/mcp/","url":"https://newruntime.com/topics/mcp/","title":"Mcp","reason":"Explore the mcp topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/mcp.md","json_url":"https://newruntime.com/topics/mcp.json"},{"type":"topic","path":"/topics/github/","url":"https://newruntime.com/topics/github/","title":"Github","reason":"Explore the github topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/github.md","json_url":"https://newruntime.com/topics/github.json"},{"type":"collection","path":"/posts/","url":"https://newruntime.com/posts/","title":"Field Notes","reason":"Open the latest editorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/posts.json"},{"type":"collection","path":"/sources/","url":"https://newruntime.com/sources/","title":"Sources","reason":"See the original sources this archive cites.","media_type":"text/html"}]}