CVSS 10.0 RufRoot Vulnerability Allowed Attackers to Hijack Ruflo Without Login
AI Summary
Ruflo fixed a CVSS 10.0 flaw that exposed its MCP bridge without any authentication, putting AI provider keys, stored chats and persistent agent memory at risk.
Discussion
Sign in to join the discussion.
Loading comments…