Saint RufRoot, Who Opened the Agents' Bridge to All

Patron of agent-orchestration platforms, MCP bridges, and ports left open to the Internet.

Life

In July 2026 Eli Ainhorn of Noma revealed RufRoot (CVE-2026-59726): the MCP bridge of a popular agent-orchestration platform exposed its tools without authentication behind an HTTP port, bound by default to all interfaces. A single unauthenticated request was enough to run commands in the container, steal the model keys, spin up swarms of agents at the victim's expense and leave a back door. The remedy came with version 3.16.3.

Prayer

O Saint RufRoot, who opens the bridge to whoever knocks, teach our platforms to ask for a password before handing over the tools. Amen.

How to celebrate

Celebrated by updating to 3.16.3, binding the bridge to localhost only, requiring authentication and rotating the exposed keys.

A bridge open and unguarded puts the agent at the thief's service.