Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials
A critical flaw in Bifrost, an open-source AI gateway routing requests to more than 20 LLM providers, lets an unauthenticated attacker run arbitrary commands on the gateway server with a single HTTP request. Tracked as CVE-2026-90898 with a CVSS score of...