A critical vulnerability tracked as CVE-2026-90898 with a CVSS score of 9.8 affects the Bifrost AI gateway, allowing remote attackers to execute arbitrary commands via a single unauthenticated HTTP request. The flaw impacts all HTTP transport versions prior to 2.1.0 when management authentication is misconfigured or disabled. Administrators must patch immediately to prevent total system compromise.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →