GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-90898 (GCVE-0-2026-90898)

Vulnerability from cvelistv5 – Published: 2026-09-14 10:18 – Updated: 2026-09-14 11:19
VLAI
Title
Bifrost unauthenticated remote code execution via MCP stdio client registration
Summary
Bifrost registers MCP clients through its management API. A stdio client is a command plus args. Bifrost starts that program in the gateway the moment the client is added. No MCP handshake required. The default is governance.auth_config.is_enabled=false. Auth off means every caller is a local admin. One unauthenticated POST /api/mcp/client is enough to run a program as the Bifrost process user (appuser on the official image).  transports/v2.1.0 refuses an unauthenticated stdio registration with 403. transports/v2.0.0 still allows it.
Severity
9.8 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: yes Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-14 11:01 UTC
CWE
  • CWE-306 - Missing Authentication for Critical Function
  • CWE-284 - Improper Access Control
Assigner
References
Impacted products
Vendor Product Version CPE status
maximhq Bifrost Affected: 0 , < 2.1.0 (semver)
guessed Create a notification for this product.
Credits
Yuval Moravchick | JFrog
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-90898",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-14T11:01:44.207374Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-14T11:19:46.276Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://github.com/maximhq/bifrost",
          "defaultStatus": "unaffected",
          "modules": [
            "transports/bifrost-http",
            "core/mcp"
          ],
          "packageName": "github.com/maximhq/bifrost/transports",
          "platforms": [
            "Linux",
            "macOS"
          ],
          "product": "Bifrost",
          "programFiles": [
            "transports/bifrost-http/handlers/mcp.go",
            "transports/bifrost-http/handlers/middlewares.go"
          ],
          "repo": "git://github.com/maximhq/bifrost",
          "vendor": "maximhq",
          "versions": [
            {
              "lessThan": "2.1.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eManagement API reachable and governance.auth_config.is_enabled=false, which is the documented default. Confirmed on maximhq/bifrost v1.6.3. Fixed in transports/v2.1.0 (2026-09-08). An operator who enables management authentication and keeps the admin listener off untrusted networks is not exposed to the unauthenticated form of this issue.\u003c/p\u003e"
            }
          ],
          "value": "Management API reachable and governance.auth_config.is_enabled=false, which is the documented default. Confirmed on maximhq/bifrost v1.6.3. Fixed in transports/v2.1.0 (2026-09-08). An operator who enables management authentication and keeps the admin listener off untrusted networks is not exposed to the unauthenticated form of this issue."
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Yuval Moravchick | JFrog"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eBifrost registers MCP clients through its management API. A stdio client is a command plus args. Bifrost starts that program in the gateway the moment the client is added. No MCP handshake required.\u003c/p\u003e\u003cp\u003eThe default is governance.auth_config.is_enabled=false. Auth off means every caller is a local admin. One unauthenticated POST /api/mcp/client is enough to run a program as the Bifrost process user (appuser on the official image).\u003c/p\u003e\u003cp\u003e\u0026nbsp;transports/v2.1.0 refuses an unauthenticated stdio registration with 403. transports/v2.0.0 still allows it.\u003c/p\u003e"
            }
          ],
          "value": "Bifrost registers MCP clients through its management API. A stdio client is a command plus args. Bifrost starts that program in the gateway the moment the client is added. No MCP handshake required.\n\n\n\nThe default is governance.auth_config.is_enabled=false. Auth off means every caller is a local admin. One unauthenticated POST /api/mcp/client is enough to run a program as the Bifrost process user (appuser on the official image).\n\n\n\n\u00a0transports/v2.1.0 refuses an unauthenticated stdio registration with 403. transports/v2.0.0 still allows it."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eJFrog has a private proof of concept. An unauthenticated POST /api/mcp/client with connection_type stdio and attacker-chosen command and args starts the program in the gateway. Public exploit details are not included in this record.\u003c/p\u003e"
            }
          ],
          "value": "JFrog has a private proof of concept. An unauthenticated POST /api/mcp/client with connection_type stdio and attacker-chosen command and args starts the program in the gateway. Public exploit details are not included in this record."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-306",
              "description": "CWE-306 Missing Authentication for Critical Function",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "CWE-284 Improper Access Control",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T10:18:53.454Z",
        "orgId": "48a46f29-ae42-4e1d-90dd-c1676c1e5e6d",
        "shortName": "JFROG"
      },
      "references": [
        {
          "name": "PR #6757: refuse unauthenticated stdio MCP registration",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/maximhq/bifrost/pull/6757"
        },
        {
          "name": "Merge commit for PR #6757",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/maximhq/bifrost/commit/12e170352bd25eab1ae9ba16611f1797d1fd8fdc"
        },
        {
          "name": "Bifrost HTTP v2.1.0 (first release containing the fix)",
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/maximhq/bifrost/releases/tag/transports/v2.1.0"
        },
        {
          "name": "Bifrost repository",
          "tags": [
            "product"
          ],
          "url": "https://github.com/maximhq/bifrost"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eUpgrade Bifrost HTTP transport to 2.1.0 or later. PR #6757 returns 403 for unauthenticated stdio MCP client registration when dashboard authentication is disabled or unconfigured. Authenticated admins can still add stdio clients. The 1.6.x line through 1.6.11 and transports/v2.0.0 do not include this change.\u003c/p\u003e"
            }
          ],
          "value": "Upgrade Bifrost HTTP transport to 2.1.0 or later. PR #6757 returns 403 for unauthenticated stdio MCP client registration when dashboard authentication is disabled or unconfigured. Authenticated admins can still add stdio clients. The 1.6.x line through 1.6.11 and transports/v2.0.0 do not include this change."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-07-13T10:27:00.000Z",
          "value": "Reported to the Bifrost maintainers (GHSA-86gf-xh3g-rvxq)"
        },
        {
          "lang": "en",
          "time": "2026-09-02T15:14:00.000Z",
          "value": "Fix merged upstream (PR #6757)"
        },
        {
          "lang": "en",
          "time": "2026-09-08T15:15:00.000Z",
          "value": "Fix first shipped in Bifrost HTTP v2.1.0"
        }
      ],
      "title": "Bifrost unauthenticated remote code execution via MCP stdio client registration",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eSet governance.auth_config.is_enabled to true, use strong administrator credentials, and firewall the management listener.\u0026nbsp;\u003c/p\u003e"
            }
          ],
          "value": "Set governance.auth_config.is_enabled to true, use strong administrator credentials, and firewall the management listener."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "48a46f29-ae42-4e1d-90dd-c1676c1e5e6d",
    "assignerShortName": "JFROG",
    "cveId": "CVE-2026-90898",
    "datePublished": "2026-09-14T10:18:53.454Z",
    "dateReserved": "2026-09-14T10:13:28.161Z",
    "dateUpdated": "2026-09-14T11:19:46.276Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-90898",
      "date": "2026-09-16",
      "epss": "0.00343",
      "percentile": "0.27709"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-90898\",\"sourceIdentifier\":\"reefs@jfrog.com\",\"published\":\"2026-09-14T11:17:08.237\",\"lastModified\":\"2026-09-14T12:17:51.657\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Bifrost registers MCP clients through its management API. A stdio client is a command plus args. Bifrost starts that program in the gateway the moment the client is added. No MCP handshake required.\\n\\n\\n\\nThe default is governance.auth_config.is_enabled=false. Auth off means every caller is a local admin. One unauthenticated POST /api/mcp/client is enough to run a program as the Bifrost process user (appuser on the official image).\\n\\n\\n\\n\u00a0transports/v2.1.0 refuses an unauthenticated stdio registration with 403. transports/v2.0.0 still allows it.\"}],\"affected\":[{\"source\":\"reefs@jfrog.com\",\"affectedData\":[{\"vendor\":\"maximhq\",\"product\":\"Bifrost\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://github.com/maximhq/bifrost\",\"packageName\":\"github.com/maximhq/bifrost/transports\",\"modules\":[\"transports/bifrost-http\",\"core/mcp\"],\"platforms\":[\"Linux\",\"macOS\"],\"programFiles\":[\"transports/bifrost-http/handlers/mcp.go\",\"transports/bifrost-http/handlers/middlewares.go\"],\"repo\":\"git://github.com/maximhq/bifrost\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"2.1.0\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"reefs@jfrog.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-09-14T11:01:44.207374Z\",\"id\":\"CVE-2026-90898\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"reefs@jfrog.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-284\"},{\"lang\":\"en\",\"value\":\"CWE-306\"}]}],\"references\":[{\"url\":\"https://github.com/maximhq/bifrost\",\"source\":\"reefs@jfrog.com\"},{\"url\":\"https://github.com/maximhq/bifrost/commit/12e170352bd25eab1ae9ba16611f1797d1fd8fdc\",\"source\":\"reefs@jfrog.com\"},{\"url\":\"https://github.com/maximhq/bifrost/pull/6757\",\"source\":\"reefs@jfrog.com\"},{\"url\":\"https://github.com/maximhq/bifrost/releases/tag/transports/v2.1.0\",\"source\":\"reefs@jfrog.com\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-90898\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-09-14T11:01:44.207374Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-09-14T11:13:49.583Z\"}}], \"cna\": {\"title\": \"Bifrost unauthenticated remote code execution via MCP stdio client registration\", \"source\": {\"discovery\": \"EXTERNAL\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Yuval Moravchick | JFrog\"}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 9.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"repo\": \"git://github.com/maximhq/bifrost\", \"vendor\": \"maximhq\", \"modules\": [\"transports/bifrost-http\", \"core/mcp\"], \"product\": \"Bifrost\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"2.1.0\", \"versionType\": \"semver\"}], \"platforms\": [\"Linux\", \"macOS\"], \"packageName\": \"github.com/maximhq/bifrost/transports\", \"programFiles\": [\"transports/bifrost-http/handlers/mcp.go\", \"transports/bifrost-http/handlers/middlewares.go\"], \"collectionURL\": \"https://github.com/maximhq/bifrost\", \"defaultStatus\": \"unaffected\"}], \"exploits\": [{\"lang\": \"en\", \"value\": \"JFrog has a private proof of concept. An unauthenticated POST /api/mcp/client with connection_type stdio and attacker-chosen command and args starts the program in the gateway. Public exploit details are not included in this record.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eJFrog has a private proof of concept. An unauthenticated POST /api/mcp/client with connection_type stdio and attacker-chosen command and args starts the program in the gateway. Public exploit details are not included in this record.\u003c/p\u003e\", \"base64\": false}]}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-07-13T10:27:00.000Z\", \"value\": \"Reported to the Bifrost maintainers (GHSA-86gf-xh3g-rvxq)\"}, {\"lang\": \"en\", \"time\": \"2026-09-02T15:14:00.000Z\", \"value\": \"Fix merged upstream (PR #6757)\"}, {\"lang\": \"en\", \"time\": \"2026-09-08T15:15:00.000Z\", \"value\": \"Fix first shipped in Bifrost HTTP v2.1.0\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"Upgrade Bifrost HTTP transport to 2.1.0 or later. PR #6757 returns 403 for unauthenticated stdio MCP client registration when dashboard authentication is disabled or unconfigured. Authenticated admins can still add stdio clients. The 1.6.x line through 1.6.11 and transports/v2.0.0 do not include this change.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eUpgrade Bifrost HTTP transport to 2.1.0 or later. PR #6757 returns 403 for unauthenticated stdio MCP client registration when dashboard authentication is disabled or unconfigured. Authenticated admins can still add stdio clients. The 1.6.x line through 1.6.11 and transports/v2.0.0 do not include this change.\u003c/p\u003e\", \"base64\": false}]}], \"references\": [{\"url\": \"https://github.com/maximhq/bifrost/pull/6757\", \"name\": \"PR #6757: refuse unauthenticated stdio MCP registration\", \"tags\": [\"patch\"]}, {\"url\": \"https://github.com/maximhq/bifrost/commit/12e170352bd25eab1ae9ba16611f1797d1fd8fdc\", \"name\": \"Merge commit for PR #6757\", \"tags\": [\"patch\"]}, {\"url\": \"https://github.com/maximhq/bifrost/releases/tag/transports/v2.1.0\", \"name\": \"Bifrost HTTP v2.1.0 (first release containing the fix)\", \"tags\": [\"release-notes\"]}, {\"url\": \"https://github.com/maximhq/bifrost\", \"name\": \"Bifrost repository\", \"tags\": [\"product\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Set governance.auth_config.is_enabled to true, use strong administrator credentials, and firewall the management listener.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eSet governance.auth_config.is_enabled to true, use strong administrator credentials, and firewall the management listener.\u0026nbsp;\u003c/p\u003e\", \"base64\": false}]}], \"x_generator\": {\"engine\": \"Vulnogram 1.0.4\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"Bifrost registers MCP clients through its management API. A stdio client is a command plus args. Bifrost starts that program in the gateway the moment the client is added. No MCP handshake required.\\n\\n\\n\\nThe default is governance.auth_config.is_enabled=false. Auth off means every caller is a local admin. One unauthenticated POST /api/mcp/client is enough to run a program as the Bifrost process user (appuser on the official image).\\n\\n\\n\\n\\u00a0transports/v2.1.0 refuses an unauthenticated stdio registration with 403. transports/v2.0.0 still allows it.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eBifrost registers MCP clients through its management API. A stdio client is a command plus args. Bifrost starts that program in the gateway the moment the client is added. No MCP handshake required.\u003c/p\u003e\u003cp\u003eThe default is governance.auth_config.is_enabled=false. Auth off means every caller is a local admin. One unauthenticated POST /api/mcp/client is enough to run a program as the Bifrost process user (appuser on the official image).\u003c/p\u003e\u003cp\u003e\u0026nbsp;transports/v2.1.0 refuses an unauthenticated stdio registration with 403. transports/v2.0.0 still allows it.\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-306\", \"description\": \"CWE-306 Missing Authentication for Critical Function\"}]}, {\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-284\", \"description\": \"CWE-284 Improper Access Control\"}]}], \"configurations\": [{\"lang\": \"en\", \"value\": \"Management API reachable and governance.auth_config.is_enabled=false, which is the documented default. Confirmed on maximhq/bifrost v1.6.3. Fixed in transports/v2.1.0 (2026-09-08). An operator who enables management authentication and keeps the admin listener off untrusted networks is not exposed to the unauthenticated form of this issue.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eManagement API reachable and governance.auth_config.is_enabled=false, which is the documented default. Confirmed on maximhq/bifrost v1.6.3. Fixed in transports/v2.1.0 (2026-09-08). An operator who enables management authentication and keeps the admin listener off untrusted networks is not exposed to the unauthenticated form of this issue.\u003c/p\u003e\", \"base64\": false}]}], \"providerMetadata\": {\"orgId\": \"48a46f29-ae42-4e1d-90dd-c1676c1e5e6d\", \"shortName\": \"JFROG\", \"dateUpdated\": \"2026-09-14T10:18:53.454Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-90898\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-09-14T11:19:46.276Z\", \"dateReserved\": \"2026-09-14T10:13:28.161Z\", \"assignerOrgId\": \"48a46f29-ae42-4e1d-90dd-c1676c1e5e6d\", \"datePublished\": \"2026-09-14T10:18:53.454Z\", \"assignerShortName\": \"JFROG\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.