CVE-2026-90898

Bifrost registers MCP clients through its management API. A stdio client is a command plus args. Bifrost starts that program in the gateway the moment the client is added. No MCP handshake required. The default is governance.auth_config.is_enabled=false. Auth off means every caller is a local admin. One unauthenticated POST /api/mcp/client is enough to run a program as the Bifrost process user (appuser on the official image).  transports/v2.1.0 refuses an unauthenticated stdio registration with 403. transports/v2.0.0 still allows it.

• CWE-284
• CWE-306

• https://github.com/maximhq/bifrost
• https://github.com/maximhq/bifrost/commit/12e170352bd25eab1ae9ba16611f1797d1fd8fdc
• https://github.com/maximhq/bifrost/pull/6757
• https://github.com/maximhq/bifrost/releases/tag/transports/v2.1.0

Published

Sep 14, 2026

Last Modified

Sep 14, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-90890ASRock Polychrome SYNC/RGB software utility developed by ASR…5.5
• CVE-2026-90891ASRock Polychrome SYNC/RGB software utility developed by ASR…5.5
• CVE-2026-90893MISP contains a Cross-Site Request Forgery (CSRF) vulnerabil…5.1
• CVE-2026-90894Parallels Desktop runs prl_disp_service as root. Local clien…7.8
• CVE-2026-90895Affected versions of MISP’s interactive CLI shell implement …8.4
• CVE-2026-90896Missing Authentication for Critical Function (CWE-306) in th…8.2
• CVE-2026-9090Casdoor versions 2.362.0 and earlier contain a vulnerability…9.1
• CVE-2026-9091Casdoor versions 2.362.0 and earlier contain a logic flaw in…5.3
• CVE-2026-90919LightLLM through 1.2.0 contains a remote code execution vuln…9.8
• CVE-2026-9092Casdoor versions 2.362.0 and earlier contain a vulnerability…9.1
• CVE-2026-90927filebrowser through 2.63.23 fails to limit WebSocket message…6.5
• CVE-2026-90928File Browser through 2.63.23 contains a memory exhaustion vu…6.5