AIKIDO-2026-820106

TL;DR

The /api/v1/auto_login endpoint mints a SUPERUSER bearer token for any network caller when auto-login is enabled, and /api/v1/validate/code runs submitted Python through exec(), including decorators, default arguments, and annotations at definition time. An unauthenticated attacker can obtain that token and then submit code to the validation endpoint to execute arbitrary commands on the host. The fix removes this unauthenticated chain so default deployments no longer expose superuser token minting paired with remote code execution.