Critical Bifrost AI Gateway Flaw Allows Unauthenticated Remote Code Execution

A critical vulnerability in Bifrost, an open-source AI gateway that routes requests to more than 20 LLM providers, lets an unauthenticated attacker run arbitrary commands on the gateway server with a single HTTP request.

The flaw, CVE-2026-90898 (CVSS 9.8), affects all versions of the Bifrost HTTP transport before 2.1.0 when management authentication isn’t configured. Anyone running Bifrost should upgrade to 2.1.0 or later and verify management auth is enabled.