CVE-2026-90898 2

Vulnerability (CVE)

Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

A critical flaw in Bifrost, an open-source AI gateway routing requests to more than 20 LLM providers, lets an unauthenticated attacker run arbitrary commands on the gateway server with a single HTTP request. Tracked as CVE-2026-90898 with a CVSS score of...

Vulnerabilities & Patching

⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats

Cyber Risks The Hacker News

A placeholder domain that appeared in roughly 1,700 repositories was registered by someone and used to serve malicious lures. Citrix released patches for CVE-2026-88771, an improper input validation flaw allowing unauthenticated arbitrary command...

Vulnerabilities & Patching