CVE Tools
Track your stack

Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

The Hacker NewsBy The Hacker News

PoC publicBifrost AI Gateway

Our summary

JFrog researchers released proof-of-concept details for CVE-2026-90898, a CVSS 9.8 flaw in Bifrost AI Gateway that lets unauthenticated attackers launch commands through MCP client registration when management authentication is disabled. All Bifrost HTTP transport versions before 2.1.0 are affected; operators should update to transports/v2.1.0 and rotate provider credentials if an exposed instance ran without authentication. The research also covers CVE-2026-86242, fixed in transports/v2.0.0, which can enable code execution on dynamically linked builds or SSRF on statically linked builds.

Read at The Hacker News

The Hacker News publishes this story on its own site; we link to it rather than reprint it.

  1. The Hacker NewsNearly 1 in 10 Exposed LiteLLM Gateways Accepted the Example "sk-1234" Admin KeyCVE-2026-42271
  2. SecurityWeekSangoma Switchvox Vulnerabilities Exploited in the WildCVE-2026-42271
  3. The Hacker NewsCISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto MinersCVE-2026-42271
  4. The Hacker NewsLiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway ServersCVE-2026-42271
  5. Daily CyberSecurity (securityonline.info)Weekly Threat Intelligence: June 8 to June 14, 2026CVE-2026-42271
  6. SecurityWeekIn Other News: Google Security Layoffs, AudiA6 Takedown, $400 Million Coupang FineCVE-2026-42271
  7. The Hacker NewsLiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCECVE-2026-42271
  8. Daily CyberSecurity (securityonline.info)CISA Active Exploit Catalog Expands with Critical Gateway FlawsCVE-2026-42271

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store