Description (CNA)
Ruflo is an agent meta-harness for Claude Code and Codex. Prior to 3.16.3, ruflo's default docker-compose deployment exposed the MCP bridge POST /mcp and POST /mcp/:group endpoints without authentication, allowing an unauthenticated network attacker to invoke tools/call to terminal_execute, obtain a shell in the bridge container, read provider API keys, and poison AgentDB learning-store patterns. This issue is fixed in version 3.16.3.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ruvnet / ruflo | affected < 3.16.3 |
CWE
CWE-78, CWE-306, CWE-942
References
- https://github.com/ruvnet/ruflo/security/advisories/GHSA-c4hm-4h84-2cf3
- https://github.com/ruvnet/ruflo/pull/2521
- https://github.com/ruvnet/ruflo/commit/d00a0a40cd8bdbca877ac7f675f416bdc69accd1
- https://github.com/ruvnet/ruflo/releases/tag/v3.16.3
ADP enrichment
No English description supplied.
No references supplied.