Live Cybersecurity News Ticker | Codekeeper

'RufRoot' Flaw Exposes AI Agent Platforms to Memory Poisoning — Even After Patching

Written by Content Team | Jul 30, 2026, 12:23:36 PM

A critical vulnerability in Ruflo, an open source AI agent platform hosting swarms for Codex and Claude Code, earned a perfect CVSS score of 10. Researchers at Noma Labs found that a single unauthenticated HTTP request could grant full remote code execution — exposing API keys, stored conversations, and shell access.

What makes CVE-2026-59726 especially alarming: attackers can poison the AI's memory, planting instructions that manipulate future responses long after they've left the system. A patch alone won't fix that.

Ruflo pushed a fix within 24 hours of disclosure on June 30. Affected organizations should rotate AI provider credentials, audit platform memory for tampering, and rebuild containers from scratch.

Source: Dark Reading