Safety
RufRoot: 233 agent tools exposed without authentication; a single HTTP request was enough
The Ruflo agent orchestration platform left its MCP bridge open to the network. Maximum CVSS score of 10; remote command execution without any access tokens.