maximhq Bifrost

3 known vulnerabilities in maximhq Bifrost, 1 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-90898 CVSS 9.8 critical Bifrost registers MCP clients through its management API. A stdio client is a command plus args. Bifrost starts that program in the…
  • CVE-2026-86242 CVSS 8.1 high Bifrost HTTP transport before 2.0.0 accepts an enabled custom plugin whose path is an HTTP URL through unauthenticated POST /api/plugins…
  • CVE-2026-55245 CVSS 8.7 high Bifrost is an enterprise AI gateway for routing requests to model providers. Prior to 1.5.17, the isPublicIP function in…