Security1 hSeptember 26, 2026, 15:01

Bifrost MCP gateway hit by critical 9.8 vulnerability

Open-source AI gateway Bifrost has a critical flaw, CVE-2026-90898 (CVSS 9.8): the official Docker image binds the management API to 0.0.0.0 with authentication disabled, so a single POST to /api/mcp/client spawns an arbitrary command. Found by Yuval Moravchick of JFrog Security Research, patched in transports/v2.1.0.

DEV Community

Open source

Bifrost MCP gateway hit by critical 9.8 vulnerability

CVE-2026-90898, CVSS 9.8: one unauthenticated POST yields command execution
Docker image binds to 0.0.0.0 with governance.auth_config.is_enabled defaulting to false
Fix in transports/v2.1.0 returns 403 for anonymous stdio registration
2.0.x and 1.6.x lines affected; attacker can exfiltrate all LLM provider API keys

#Bifrost#MCP#JFrog

Critical Bifrost AI Gateway Flaw Allows Unauthenticated Command Execution

Security

Cisco Secure Email Gateway hit by critical CVE-2026-76443 injection flaw

Security

CISA adds JFrog Artifactory auth bypass to exploited vulnerabilities list

Security

Bifrost MCP gateway hit by critical 9.8 vulnerability

Critical Bifrost AI Gateway Flaw Allows Unauthenticated Command Execution

Cisco Secure Email Gateway hit by critical CVE-2026-76443 injection flaw

CISA adds JFrog Artifactory auth bypass to exploited vulnerabilities list

The AI Gateway Is Now a Credential Hub: What the LiteLLM MCP Authentication Bypass Means for Self-Hosted LLM Infrastructure