Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials
1. Executive summary CVE-2026-90898 (CVSS 9.8, CRITICAL, CWE-284 and CWE-306) is an unauthenticated command-execution flaw in Bifrost, an open-source
22 Sep 2026 · 6 min read
read →