Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

Home / Tech / Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

September 22, 2026 dirk 0 Comments 3 tags

Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

A critical vulnerability in Bifrost, an open-source AI gateway that routes requests to more than 20 LLM providers, allows an unauthenticated attacker to run arbitrary commands on the gateway server with a single HTTP request.

The flaw, tracked as CVE-2026-90898 (CVSS score: 9.8), affects all versions of the Bifrost HTTP transport before 2.1.0 when management authentication is

Source: The Hacker News

Explore More

The Safari MCP server for web developers

The Safari MCP server for web developers Source: Hacker News

Designing for Dual Screen and Foldable Devices with CSS (2023)

Designing for Dual Screen and Foldable Devices with CSS (2023) Source: Hacker News

China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE

China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE A Chinese threat actor has been attributed to a spear-phishing campaign that exploits recently patched security flaws in Google Chrome and