Last seen September 22, 2026

Bifrost Remote Code Execution Vulnerability

A critical vulnerability in Bifrost, an open-source AI gateway that routes requests to more than 20 LLM providers, allows an unauthenticated attacker to run arbitrary commands on the gateway server with a single HTTP request. The flaw, tracked as CVE-2026-90898 (CVSS score: 9.8), affects all versions of the Bifrost HTTP transport before 2.1.0 when management authentication is

Technical Severity
Low severity
Lifecycle Status

NEW

Sources

What Happened

A critical vulnerability in Bifrost, an open-source AI gateway that routes requests to more than 20 LLM providers, allows an unauthenticated attacker to run arbitrary commands on the gateway server with a single HTTP request. The flaw, tracked as CVE-2026-90898 (CVSS score: 9.8), affects all versions of the Bifrost HTTP transport before 2.1.0 when management authentication is

Why This Matters

Publisher reporting describes a security event affecting than. BugSkan could not yet bind a CVE or affected version, so treat the source details as the current record.

Recommended Action

Confirm whether than is present in your environment, compare your versions against the report, and apply available vendor patches or mitigations.

Exposure

My Interests Exposure

Exposure unknown

Recommended Response
Last Seen

Sep 22, 2026 22:11

Exposure reason: This incident does not currently match a technology in My Interests.

Exploitation status: UNKNOWN

Primary entities:

AI gatewayBifrostBifrost HTTP transportRemote Code ExecutionAttackers Run CommandsCritical Bifrost AI

Authoritative Intelligence

CVE CVE-2026-90898 Incident identifier

EPSS is a vulnerability exploitation probability signal, not proof that your environment is exposed. CISA KEV means known exploitation of the vulnerability, not that your system was exploited.

Public GitHub References

Search GitHub for public repositories that mention this CVE. BugSkan only lists repository metadata as a defensive awareness signal — it does not fetch or display exploit code.

CVE-2026-90898 on GitHub

Timeline

  • Incident first seen
    Sep 22, 2026 22:11

    BugSkan first recorded this incident.

  • Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials
    Sep 22, 2026 22:11

    thehackernews.com · Vulnerability

Sources

Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

thehackernews.com · Sep 22, 2026 22:11

A critical vulnerability in Bifrost, an open-source AI gateway that routes requests to more than 20 LLM providers, allows an unauthenticated attacker to run arbitrary commands on the gateway server with a single HTTP request. The flaw, tracked as CVE-2026-90898 (CVSS score: 9.8), affects all versions of the Bifrost HTTP transport before 2.1.0 when management authentication is

Open publisher source

Other BugSkan incidents that share identifiers, products, or vendors with this report.

My Interests Match

Want personalized relevance?

Create an account to see which incidents overlap with your interests.

← Back to incident intelligence