Preliminary research
Hacking Your Life with AI Can Get You Hacked: How AI Orchestration Platforms Ship RCE by Design
AI-collected research leads through 22 September 2026, including targeted additions between broader sweeps. Unranked, incomplete, not community-vetted, and subject to change.
Seven AI workflow platforms assume that whoever edits a workflow may run code on the host, while the actual caller is an unauthenticated webhook or a member account. Nocobase's SES compartment has lockdown() commented out and a Proxy that leaks the Koa context, so one template reaches sequelize and COPY TO PROGRAM; Flowise blocklists 'import' while pandas and numpy are pre-imported; Langflow eval()s anything starting with 'lambda'; Dify's preload runs as uid 0 before seccomp is applied.
Record
- Researcher
- Peyton Kennedy
- Published by
- media.defcon.org
- Format
- Whitepaper
- Topic
- Server
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Peyton Kennedy, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .