ruvnet vulnerabilities

Products

• sublinear-time-solver 2
• agentic-flow 1
• ruflo 1

Latest ruvnet CVEs

Newest publication first

1. CVE-2026-55609 sublinear-time-solver: Arbitrary file write in consciousness-explorer / sublinear-time-solver MCP export_state

   Published 2026-08-25

   High·CVSS 7.1 EPSS 0.17%

   sublinear-time-solver is a Rust and WebAssembly library for solving asymmetric diagonally dominant systems in sublinear time. Prior to consciousness-explorer 1.1.2 and sublinear-time-solver 1.6.0, the export_state and import_state tools in src/consciousness-explorer/mcp/server.js...

2. CVE-2026-58195 Agentic-Flow: OS Command Injection in agentic-flow MCP server tools via unsanitized tool-parameter interpolation into execSync

   Published 2026-07-17

   High·CVSS 8.8 EPSS 0.56%

   Agentic-Flow is an AI agent orchestration platform. Prior to 2.0.14, agentic-flow MCP server tools in src/mcp/standalone-stdio.ts, src/mcp/fastmcp/servers/claude-flow-sdk.ts, src/mcp/fastmcp/servers/stdio-full.ts, src/mcp/fastmcp/servers/http-streaming-updated.ts, src/mcp/fastmcp...

3. CVE-2026-59726 Ruflo: Unauthenticated RCE in MCP bridge default docker-compose deployment

   Published 2026-07-09

   Critical·CVSS 10.0 EPSS 6.2% Public exploit

   Ruflo is an agent meta-harness for Claude Code and Codex. Prior to 3.16.3, ruflo's default docker-compose deployment exposed the MCP bridge POST /mcp and POST /mcp/:group endpoints without authentication, allowing an unauthenticated network attacker to invoke tools/call to termin...

4. CVE-2026-7645 ruvnet sublinear-time-solver MCP server.js export_state path traversal

   Published 2026-05-02

   Medium·CVSS 6.9 EPSS 0.46%

   A vulnerability was found in ruvnet sublinear-time-solver 1.5.0. Affected by this vulnerability is the function export_state of the file src/consciousness-explorer/mcp/server.js of the component MCP Interface. The manipulation results in path traversal. The attack can be executed...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.