CVE-2026-58195High 8.8Agentic-Flow: OS Command Injection in agentic-flow MCP server tools via unsanitized tool-parameter interpolation into execSync0.6%
CVE-2026-59726Critical 10.0Ruflo: Unauthenticated RCE in MCP bridge default docker-compose deployment3.0%