What’s Vulnerable › Products

maximhq Bifrost vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your maximhq Bifrost version is affected

Latest maximhq Bifrost vulnerabilities

• CVE-2026-90898 — Bifrost unauthenticated remote code execution via MCP stdio client registration (CVSS 9.8)
• CVE-2026-86242 — Unauthenticated RCE via Custom Plugin HTTP Path on Dynamically Linked Builds (CVSS 8.1)
• CVE-2026-55245 — Bifrost: SSRF deny-list incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL (CVSS 8.7)