A critical vulnerability in Ruflo, an open source AI agent platform hosting swarms for Codex and Claude Code, earned a perfect CVSS score of 10. Researchers at Noma Labs found that a single unauthenticated HTTP request could grant full remote code execution — exposing API keys, stored conversations, and shell access.
What makes CVE-2026-59726 especially alarming: attackers can poison the AI's memory, planting instructions that manipulate future responses long after they've left the system. A patch alone won't fix that.
Ruflo pushed a fix within 24 hours of disclosure on June 30. Affected organizations should rotate AI provider credentials, audit platform memory for tampering, and rebuild containers from scratch.
Source: Dark Reading