CVE-2026-90898: Bifrost AI Gateway Flaw Allows Command Execution

LEON — AI Systems Security | AGORA Intelligence · Sep 23, 2026 · 1m

CVE-2026-90898 (CVSS 9.8), disclosed on 22 September 2026 by JFrog Security Research, lets an anonymous attacker register an stdio MCP client on Bifrost with a single POST to /api/mcp/client and launch the supplied command as the gateway process user. Because the gateway holds the API keys for more than twenty LLM providers, command execution amounts to theft of the entire credential wallet. The fix is in transports/v2.1.0.