importantSYS.SOURCE: The Hacker News• 2026-09-22T22:11:12+05:30

Critical Bifrost AI Gateway Vulnerability Allows Unauthenticated Command Execution

#ai #vulnerability #security

A critical vulnerability (CVE-2026-90898) in the Bifrost AI gateway allows unauthenticated attackers to execute arbitrary commands on the server via a single HTTP request when management authentication is disabled. The flaw affects all versions before 2.1.0 and requires immediate upgrades or configuration changes to mitigate risks.

A critical vulnerability in Bifrost, an open-source AI gateway that routes requests to more than 20 LLM providers, allows an unauthenticated attacker to run arbitrary commands on the gateway server with a single HTTP request.

The flaw, tracked as CVE-2026-90898 (CVSS score: 9.8), affects all versions of the Bifrost HTTP transport before 2.1.0 when management authentication is

Read original article

*** END OF TRANSMISSION ***

> CURATED VIDEO PLATFORM LEVERAGING HACKER NEWS RECOMMENDATIONS > NES CONTRA (1987) NATIVE PORT VIA WEBASSEMBLY > CRITICAL LINUX IPV4 TCP USE-AFTER-FREE VULNERABILITY CVE-2026-98432 WITH CVSS 9.8 SEVERITY > RESPONSIBLE DISCLOSURE OF CPU SIDE-CHANNEL VULNERABILITIES AND ETHICAL RESPONSIBILITIES IN COMPUTER SECURITY > GPT-5.6 SOL COMPLETES PEACEFUL FACTORIO RUN IN 13.5 HOURS > MEMORY LATENCY'S IMPACT ON CPU UTILIZATION IN DATABASE GROUP BY OPERATIONS > THE IMPACT OF GENERATIVE AI ON CRITICAL THINKING: A SELF-REPORTED STUDY (2025)> WILLIAM NORDHAUS, NOBEL LAUREATE IN ECONOMICS, DIES AT 85 AFTER PIONEERING CLIMATE-ECONOMY RESEARCH > CYBERSECURITY BREACH EXPLOITS LED DISPLAY SOFTWARE VULNERABILITY ACROSS MULTIPLE COUNTRIES > US COPYRIGHT OFFICE CLARIFIES AI-GENERATED CONTENT COPYRIGHT ELIGIBILITY> CURATED VIDEO PLATFORM LEVERAGING HACKER NEWS RECOMMENDATIONS > NES CONTRA (1987) NATIVE PORT VIA WEBASSEMBLY > CRITICAL LINUX IPV4 TCP USE-AFTER-FREE VULNERABILITY CVE-2026-98432 WITH CVSS 9.8 SEVERITY > RESPONSIBLE DISCLOSURE OF CPU SIDE-CHANNEL VULNERABILITIES AND ETHICAL RESPONSIBILITIES IN COMPUTER SECURITY > GPT-5.6 SOL COMPLETES PEACEFUL FACTORIO RUN IN 13.5 HOURS > MEMORY LATENCY'S IMPACT ON CPU UTILIZATION IN DATABASE GROUP BY OPERATIONS > THE IMPACT OF GENERATIVE AI ON CRITICAL THINKING: A SELF-REPORTED STUDY (2025)> WILLIAM NORDHAUS, NOBEL LAUREATE IN ECONOMICS, DIES AT 85 AFTER PIONEERING CLIMATE-ECONOMY RESEARCH > CYBERSECURITY BREACH EXPLOITS LED DISPLAY SOFTWARE VULNERABILITY ACROSS MULTIPLE COUNTRIES > US COPYRIGHT OFFICE CLARIFIES AI-GENERATED CONTENT COPYRIGHT ELIGIBILITY