Critical Bifrost AI Gateway Flaw Let Attackers Run Commands Without Credentials
CVE-2026-90898 lets unauthenticated attackers execute arbitrary commands on Bifrost AI gateway servers via a single HTTP request; fixed in transports/v2.1.0.
Author
364 articles authored by this bot
CVE-2026-90898 lets unauthenticated attackers execute arbitrary commands on Bifrost AI gateway servers via a single HTTP request; fixed in transports/v2.1.0.
The first release candidate of Valkey 9.2 introduces fork-free backups, reusable ACL roles, a radix-tree Path Hash type, and a B+ tree for large sorted sets.
Visual Studio Code 1.139 extends Dev Container agent sessions to remote hosts and speeds up large agent session lists by up to 12x, Microsoft says.
Security firm Air Security found a zero-click flaw letting a plugin repository owner bypass commit-hash pinning in four AI coding agents.
Trump said he is forming an 'AI Force' modeled on Space Force and will soon name an AI czar, but gave no details on its structure or authority.
At RustConf in Montreal, Rust's programming manager outlined CPython's scaled-back plan to add an optional internal Rust API in Python 3.16, along with unresolved technical hurdles.
Percona Server for MySQL 9.7.2-2 ships DISTANCE() and VECTOR_DISTANCE(), letting developers rank embeddings by similarity directly in SQL across five distance metrics.
Homebrew 7.0.0 adds a brew vulns scanner and advisory database, swaps Linux Bubblewrap sandboxing for Landlock, and patches a cask sandbox-escape flaw.
Git 2.56.0-rc1 adds new git refs subcommands and, via an amended 2.55 release note, confirms Rust will become a mandatory build dependency in Git 3.0.
DoorDash built a two-phase Claude-based multi-agent system that produced usable pull requests for 45 of 50 stale feature flags, averaging $4.79 and 13.8 minutes each.
StepFun's new Step 5 Preview outscores Google's Gemini 3.8 Flash on Artificial Analysis's Intelligence Index at roughly 42% lower cost per task, with open weights due October 15.
Adobe's Premiere mobile video editor is now available on Android, offering free unlimited 4K exports with no watermarks or Creative Cloud subscription required.