ruvnet

Products

ProductCVEsExploitedLatest
sublinear-time-solver2–Aug 25, 2026
agentic-flow1–Jul 17, 2026
ruflo1–Jul 9, 2026

Exploited and recent CVEs

  • CVE-2026-55609 High 7.1 sublinear-time-solver: Arbitrary file write in consciousness-explorer / sublinear-time-solver MCP export_state 0.2%
  • CVE-2026-58195 High 8.8 Agentic-Flow: OS Command Injection in agentic-flow MCP server tools via unsanitized tool-parameter interpolation into execSync 0.6%
  • CVE-2026-59726 Critical 10.0 Ruflo: Unauthenticated RCE in MCP bridge default docker-compose deployment 3.0%
  • CVE-2026-7645 Medium 6.5 ruvnet sublinear-time-solver MCP server.js export_state path traversal 0.5%