A critical authentication bypass vulnerability in maximhq Bifrost allows unauthenticated attackers to execute arbitrary code on the host system with the privileges of the application process.

The application fails to enforce authentication for MCP client registration via the POST /api/mcp/client endpoint. This allows an unauthenticated attacker to inject and execute arbitrary programs as the Bifrost process user when the default governance configuration is active.

The potential for unauthenticated remote code execution represents a critical risk to organizational infrastructure. An attacker could gain full control over the Bifrost gateway, leading to unauthorized data access, system compromise, and lateral movement within the network. With a CVSS score of 9.8, this vulnerability poses an immediate and severe threat to the confidentiality, integrity, and availability of affected systems.

Immediate Action: Update the Bifrost HTTP transport component to version 2.1.0 or later immediately to enforce necessary authentication checks.

Proactive Monitoring: Monitor API access logs for suspicious POST requests to the /api/mcp/client endpoint, particularly those originating from untrusted or external IP addresses.

Compensating Controls: If an immediate update is not feasible, restrict network access to the Bifrost management API using a firewall or reverse proxy to ensure only authorized administrative traffic can reach the endpoint.

Public Exploit Available: No

The severity of this vulnerability necessitates immediate remediation. Organizations using Bifrost must prioritize updating to version 2.1.0 or later to close the authentication gap. Failure to apply this patch exposes the host environment to trivial remote code execution, making rapid deployment of the vendor-provided fix the only effective way to mitigate this risk.