Definition
A severe type of vulnerability that lets an attacker run any software command they choose on a target computer — without needing a username or password to get started. In AI infrastructure, this typically means complete control over the AI server and everything it connects to.
Why it matters
RCE in AI platforms such as Langflow or LiteLLM gives an attacker the same access as the AI operator: all model credentials, all connected databases, all API keys, and the ability to pivot into the broader corporate network. Several such vulnerabilities were actively exploited in 2026.