An authenticated remote code execution vulnerability in BiSheng versions prior to 2.6.0 allows attackers to execute arbitrary Python code, potentially compromising the entire host system.

This vulnerability exists in the POST /api/v1/workflow/run_once endpoint, where the application fails to properly sandbox Code node definitions. An authenticated user can submit crafted input that is processed by the exec() function, leading to arbitrary Python code execution on the server.

Successful exploitation of this vulnerability grants an attacker the ability to execute arbitrary code with the privileges of the application process. This can result in unauthorized access to sensitive filesystem data, exfiltration of stored credentials, and lateral movement into the internal network. Given the CVSS score of 8.8, this represents a high-severity risk that could lead to full system compromise and significant operational disruption.

Immediate Action: Upgrade BiSheng to version 2.6.0 or later immediately to incorporate the necessary sandboxing and input validation fixes.

Proactive Monitoring: Review application access logs for any suspicious POST requests to the /api/v1/workflow/run_once endpoint, particularly those containing encoded Python logic or unusual node definitions.

Compensating Controls: Deploy a Web Application Firewall (WAF) to inspect and block requests to the workflow execution endpoint that contain suspicious code patterns or unexpected payload structures.

Public Exploit Available: Unknown

The severity of this remote code execution flaw necessitates immediate attention. Administrators must prioritize upgrading their BiSheng instances to version 2.6.0. If an immediate update is not feasible, restrict access to the affected API endpoint via network-level controls or WAF rules to prevent unauthorized users from reaching the vulnerable code path.