Skip to content
OpenAdvisories

Product · maximhq

Bifrost

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-90898 Public exploit Scanner template

    Bifrost unauthenticated remote code execution via MCP stdio client registration

    Bifrost registers MCP clients through its management API. A stdio client is a command plus args. Bifrost starts that program in the gateway the moment the client is added. No MCP handshake required. The default is governance.auth_config.is_enabled=false. Auth…

    maximhq Bifrost