RCE by design: audit finds 14 flaws across 7 AI orchestration platforms
An audit of seven AI orchestration platforms, NocoBase, Flowise, Langflow, Dify, Activepieces, Kestra and Airflow, turned up 14 critical and high-severity findings rooted in one assumption: anyone who can touch a workflow is trusted to run code. The worst chain needs no account, a prompt injection triggers code execution and data exfiltration before the attacker ever logs in. Several vendors closed reports as working as designed, since executing code is the product, even when that product ships internet-reachable.