Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials
Summary: A critical flaw in Bifrost, an open-source AI gateway routing requests to more than 20 LLM providers, lets an unauthenticated attacker run arbitrary commands on the gateway server with a single HTTP request. Tracked as CVE-2026-90898 with a CVSS score of 9.8, it affects all Bifrost HTTP transport versions before 2.1.0 when management authentication is disabled, which is the default; a fix is in transports/v2.1.0.
Why it matters: Because the gateway stores API keys for every connected provider, command execution as the gateway process user hands an attacker those credentials - and the official Docker image binds the management API to 0.0.0.0, reachable from outside the container if the port is published. JFrog advises treating any instance that ran with authentication disabled and the management API exposed as compromised, and rotating virtual keys and provider API keys.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2026-55245CVE-2026-86242CVE-2026-90898
- Related
- ⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026