⬇ Download holy card: ·
⚔ Commemorated today: The Scourge of the Misconfigured Cloud (2019)Saint RufRoot, Who Opened the Agents' Bridge to All
Patron of agent-orchestration platforms, MCP bridges, and ports left open to the Internet.
Life
In July 2026 Eli Ainhorn of Noma revealed RufRoot (CVE-2026-59726): the MCP bridge of a popular agent-orchestration platform exposed its tools without authentication behind an HTTP port, bound by default to all interfaces. A single unauthenticated request was enough to run commands in the container, steal the model keys, spin up swarms of agents at the victim's expense and leave a back door. The remedy came with version 3.16.3.
Prayer
O Saint RufRoot, who opens the bridge to whoever knocks, teach our platforms to ask for a password before handing over the tools. Amen.
How to celebrate
Celebrated by updating to 3.16.3, binding the bridge to localhost only, requiring authentication and rotating the exposed keys.
A bridge open and unguarded puts the agent at the thief's service.