Maximhq vulnerabilities
We track 3 vulnerabilities in Maximhq products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 14, 2026.
Latest Maximhq vulnerabilities
- 9.8 Critical severity
Bifrost: Improper Access Control
Bifrost registers MCP clients through its management API. A stdio client is a command plus args. Bifrost starts that program in the gateway the moment the client is added. No MCP handshake required. The default is governance.auth_config.is_enabled=false. Auth
- 8.1 High severity
Bifrost: Improper Control of Generation of Code
Bifrost HTTP transport before 2.0.0 accepts an enabled custom plugin whose path is an HTTP URL through unauthenticated POST /api/plugins when management authentication is disabled (the default, governance.auth_config.is_enabled=false). The shared-object loader
- 8.7 High severity
bifrost: Server-Side Request Forgery
Bifrost is an enterprise AI gateway for routing requests to model providers. Prior to 1.5.17, the isPublicIP function in core/providers/utils/fetch.go, reached through FetchAndEncodeURL for Bedrock and Vertex image or document URLs, classifies Carrier-Grade NA