CyberRota Analysis
AI-GeneratedThe default docker-compose deployment of Ruflo prior to version 3.16.3 exposes critical MCP bridge endpoints without authentication, allowing unauthenticated attackers to execute commands, gain shell access to the bridge container, and access sensitive provider API keys. This vulnerability poses a severe risk to any organization using affected versions of Ruflo, particularly those relying on Docker for container management. Organizations should prioritize upgrading to version 3.16.3 or later to mitigate this critical security risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Ruflo is an agent meta-harness for Claude Code and Codex. Prior to 3.16.3, ruflo's default docker-compose deployment exposed the MCP bridge POST /mcp and POST /mcp/:group endpoints without authentication, allowing an unauthenticated network attacker to invoke tools/call to terminal_execute, obtain a shell in the bridge container, read provider API keys, and poison AgentDB learning-store patterns. This issue is fixed in version 3.16.3.