HORKimhab/CVE-2026-90898

PoC

CVE-2026-90898 - Draft or TODO

view exploit source poc_in_githubauthor HORKimhabpublished 2026-09-23catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-90898US	—OT elevated	2.31% (83rd)	Exploit	2026-09-14
Bifrost registers MCP clients through its management API. A stdio client is a command plus args. Bifrost starts that program in the gateway the moment the client is added. No MCP h…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.