CVE-2026-82278

Remote code execution via unauthenticated workflow run_once endpoint (exec() abuse).

• CVSS 8.7
• 94
• Input Validation and Sanitization
• Remote

BISHENG before 2.6.0 contains a remote code execution vulnerability in the workflow run_once endpoint that allows authenticated users to execute arbitrary Python code. Attackers can submit crafted Code node definitions to the POST /api/v1/workflow/run_once endpoint, which executes them with exec() without sandboxing, gaining access to filesystem, credentials, and internal network resources.

CVE

CVE-2026-82278

CWE

94

CVSS base score

8.7

Published

2026-08-28

OWASP

A03 Injection

Orthogonal defect classification

Checking

Code defect classification

Missing Check

Category

Input Validation and Sanitization

Subcategory

Command Injection

Accessibility scope

Remote

Impact

Arbitrary Code Execution

Affected component

Python

Solution

Upgrade BISHENG to version 2.6.0 or later, which patches the remote code execution vulnerability in the /api/v1/workflow/run_once endpoint.

import json

def run_once(request_body: str) -> dict:
    """
    Executes a single workflow step defined by the user.
    Expects a JSON payload with a 'code' field containing Python code.
    """
    payload = json.loads(request_body)
    # VULNERABLE: exec of untrusted code
    exec(payload["code"], {})
    return {"status": "ok"}

import json
import ast

def run_once(request_body: str) -> dict:
    """
    Executes a single workflow step defined by the user.
    Expects a JSON payload with a 'code' field containing Python code.
    """
    payload = json.loads(request_body)
    # FIX: parse and validate AST to reject unsafe statements
    tree = ast.parse(payload["code"], mode='exec')
    for node in ast.walk(tree):
        if isinstance(node, (ast.Import, ast.ImportFrom, ast.Call, ast.Attribute)):
            raise ValueError("Disallowed operation in workflow code")
    compiled = compile(tree, filename="<workflow>", mode='exec')
    exec(compiled, {})
    return {"status": "ok"}

__VAITP_MODEL_REFUSED__

@misc{vaitp:cve202682278,
  title        = {{Remote code execution via unauthenticated workflow run_once endpoint (exec() abuse).}},
  author       = {Bogaerts, Fr\'ed\'eric and Ivaki, Naghmeh and Fonseca, Jos\'e},
  year         = {2026},
  note         = {VAITP Python Vulnerability Dataset, entry CVE-2026-82278},
  howpublished = {\url{https://netpack.pt/vaitp/vulnerability/CVE-2026-82278/}}
}