Maximhq Bifrost vulnerabilities
- brokercap bifrost Bifrost unauthenticated remote code execution via MCP stdio client registration 9.8 Critical
- brokercap bifrost Unauthenticated RCE via Custom Plugin HTTP Path on Dynamically Linked Builds 8.1 High
- brokercap bifrost Bifrost: SSRF deny-list incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL 8.7 High