AIKIDO-2026-275215
github.com/maximhq/bifrost/transports is vulnerable to Remote Code Execution (RCE)
98
CVE Score
Critical
Remote Code Execution (RCE)
TL;DR
POST /api/mcp/client registers a stdio MCP client from a caller-supplied command and args and starts that program in the gateway immediately, with no MCP handshake required. The default governance.auth_config.is_enabled=false treats every caller as a local admin, so an unauthenticated request can run an arbitrary program as the Bifrost process user. The fix returns 403 for unauthenticated stdio MCP client registration when dashboard authentication is disabled or unconfigured.
How do I fix this?
Upgrade the github.com/maximhq/bifrost/transports library to the patch version.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and the management API is reachable with governance.auth_config.is_enabled left at the default false.
Versions
1.0.0 - 2.0.0
Fixed in 2.1.0Background info
github.com/maximhq/bifrost/transports is vulnerable to Remote Code Execution (RCE) in versions 1.0.0 - 2.0.0.
Links
GitHub Release
Get secure today,
quickly and for free.
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPAuthorized© All Intel data is openly available and commercially licensed.