BISHENG before 2.6.0 contains a remote code execution vulnerability in the workflow run_once endpoint that allows authenticated users to execute arbitrary Python code. Attackers can submit crafted Code node definitions to the POST /api/v1/workflow/run_once endpoint, which executes them with exec() without sandboxing, gaining access to filesystem, credentials, and internal network resources.

BISHENG versions before 2.6.0 contain a critical remote code execution vulnerability in the workflow run_once endpoint. Authenticated users can submit crafted Code node definitions to the POST /api/v1/workflow/run_once endpoint, which executes arbitrary Python code using exec() without any sandboxing. This allows attackers to gain access to the filesystem, credentials, and internal network resources. The vulnerability requires authentication but represents a severe privilege escalation and lateral movement risk. It is tracked as CVE-2026-82278 and has been patched in BISHENG 2.6.0. The issue was disclosed via GitHub and VulnCheck advisories.