CVE-2026-86242: CWE-94: Improper Control of Generation of Code ('Code Injection') in maximhq Bifrost

Bifrost HTTP transport before version 2.0.0-prerelease3 allows unauthenticated POST requests to /api/plugins to specify a custom plugin path as an HTTP URL when management authentication is disabled (default). The system downloads the plugin shared object (.so) file, writes it to a temporary location, and attempts to load it dynamically using Go's plugin.Open. On dynamically linked builds, this leads to unauthenticated remote code execution because the plugin's Init function runs immediately with the Bifrost process user privileges. On statically linked Docker images, plugin.Open fails, limiting the impact to server-side request forgery. The attack complexity is high because the attacker must supply a plugin matching the host's Go version, OS, architecture, and linkage. Versions in the 1.6.x HTTP transport line through 1.6.11 are also vulnerable. No official patch information is provided.

Successful exploitation allows unauthenticated remote code execution on dynamically linked builds of Bifrost HTTP transport before 2.0.0-prerelease3 when management authentication is disabled. This can lead to full compromise of the Bifrost process user. On statically linked Docker images, exploitation is limited to server-side request forgery. The attack requires high complexity due to environment-specific plugin requirements. Confidentiality, integrity, and availability impacts are all rated high (CVSS 8.1).

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, ensure that management authentication is enabled (governance.auth_config.is_enabled=true) to prevent unauthenticated plugin uploads. Avoid using dynamically linked builds if possible, as statically linked Docker images are not vulnerable to remote code execution via this vector.