Brokercap Bifrost vulnerabilities
- brokercap bifrost Bifrost unauthenticated remote code execution via MCP stdio client registration 9.8 Critical
- bitfrost.io bifrost Bifrost Unauthorized Channel Commission Attribution Allows Commission Diversion 9.1 Critical
- brokercap bifrost Unauthenticated RCE via Custom Plugin HTTP Path on Dynamically Linked Builds 8.1 High
- brokercap bifrost Bifrost: SSRF deny-list incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL 8.7 High
- brokercap bifrost Brokercap Bifrost vulnerable to authentication bypass for admin and monitor user groups 8.8 High
- brokercap bifrost Bifrost users using basic authntication can bypass write permission limit 8.5 High