Bifrost HTTP transport versions prior to 2.0.0 are vulnerable to unauthenticated remote code execution when misconfigured, posing a critical security risk to the host system.

The application suffers from improper control of code generation and missing authentication for critical functions, allowing an unauthenticated attacker to inject and execute arbitrary code via the POST /api/plugins endpoint when management authentication is disabled.

A successful exploit allows an attacker to execute arbitrary code with the privileges of the Bifrost process user, potentially leading to full system compromise, data exfiltration, or lateral movement within the network. While the CVSS score of 8.1 reflects a high severity, the impact is particularly severe in dynamically linked environments where remote code execution is trivial to achieve. Organizations failing to secure this endpoint risk significant operational disruption and total loss of confidentiality and integrity for the affected server.

Immediate Action: Upgrade the Bifrost HTTP transport component to version 2.0.0 or later, which implements strict authentication checks and hardens the plugin downloader against SSRF attacks.

Proactive Monitoring: Review access logs for unauthorized POST requests to the /api/plugins endpoint and monitor for unexpected process execution or file system changes originating from the Bifrost service account.

Compensating Controls: Ensure that management authentication is explicitly enabled in the configuration, and deploy a Web Application Firewall to block unauthorized access to the /api/plugins path.

Public Exploit Available: No

Organizations must prioritize upgrading to version 2.0.0, as this is the only definitive way to address the underlying architectural flaw. Administrators should verify their current build type and ensure that governance authentication is enabled as a baseline security posture to prevent exploitation of this and similar vulnerabilities.