Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

A critical vulnerability in Bifrost, an open-source AI gateway (software that routes requests to multiple language models), allows attackers to run arbitrary commands (any code they want) on the server without needing credentials when management authentication is disabled by default. The flaw is especially dangerous because the gateway stores API keys for connected providers, so compromised servers give attackers access to those credentials, and the official Docker image exposes the vulnerable management API to outside networks.