{"uuid": "6818fcbb-40d2-4e98-abdd-7a77be43cf05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59726", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrutyvij762y", "content": "\u26a0\ufe0f PATCH NOW\n\nRuflo, a popular open-source AI agent platform, exposed its control bridge to the whole network with no login. One request runs shell commands (CVE-2026-59726, CVSS 10).\n\nFixed in 3.16.3.\n\nPatch, then audit the agent's memory: a clean redeploy won't clean it.", "creation_timestamp": "2026-07-30T16:23:25.231918Z"}