Vulnerabilities

TI-2026-61769 CVE-2026-90898 · GHSA-gqjq-cgxr-8c7c

Bifrost unauthenticated remote code execution via MCP stdio client registration

MEDIUM 53

Bifrost registers MCP clients through its management API.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02311 Published 2026-09-14 Fixed in 2.1.0 CWE-284

TI-2026-59029 CVE-2026-86242 · GHSA-7g8f-4jrf-x782

Unauthenticated RCE via Custom Plugin HTTP Path on Dynamically Linked Builds

MEDIUM 43

Bifrost HTTP transport before 2.0.0 accepts an enabled custom plugin whose path is an HTTP URL through unauthenticated POST /api/plugins when management authentication is disabled (the default, governance.auth_config.is_…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.03575 Published 2026-09-06 Fixed in 2.0.0 CWE-284

TI-2026-39919 CVE-2026-55245 · GHSA-w98g-5w9p-p3rc

Bifrost: SSRF deny-list incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL

HIGH 77

Bifrost is an enterprise AI gateway for routing requests to model providers.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00611 Published 2026-08-28 Fixed in 1.5.17 CWE-918

Vulnerabilities

Filters

Bifrost unauthenticated remote code execution via MCP stdio client registration

Unauthenticated RCE via Custom Plugin HTTP Path on Dynamically Linked Builds

Bifrost: SSRF deny-list incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL