AIKIDO-2026-275215
github.com/maximhq/bifrost/transports is vulnerable to Remote Code Execution (RCE)
98
Critical Risk
This Affects:
github.com/maximhq/bifrost/transportsTL;DR
POST /api/mcp/client registers a stdio MCP client from a caller-supplied command and args and starts that program in the gateway immediately, with no MCP handshake required. The default governance.auth_config.is_enabled=false treats every caller as a local admin, so an unauthenticated request can run an arbitrary program as the Bifrost process user. The fix returns 403 for unauthenticated stdio MCP client registration when dashboard authentication is disabled or unconfigured.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and the management API is reachable with governance.auth_config.is_enabled left at the default false.
Background info
github.com/maximhq/bifrost/transports is vulnerable to Remote Code Execution (RCE) in versions 1.0.0 - 2.0.0.
How to fix this
Upgrade the github.com/maximhq/bifrost/transports library to the patch version.
Links
GitHub Release
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.