{"slug": "how-to-securely-open-up-your-server-for-rce-and-lambda-functions", "title": "How to securely open up your server for RCE and \"lambda functions\"", "summary": "A developer has added a component to their project that lets users dynamically declare HTTP endpoints which accept code, natural language, or a combination, execute the resulting code on the server, and return the response to the caller. The endpoints are capability-constrained using RBAC, and the developer says agents can optionally authenticate their existing MCP-enabled harness using OIDC, describing the concept as a \"lambda function in Claude, Codex, etc.\" The developer warns that basic IT and security knowledge is still required to create such endpoints securely.", "body_md": "I’ve previously written about how I exposed an endpoint for RCE, and how I could do it securely. Now I’ve implemented a component into the project, allowing you to dynamically declare such HTTP endpoints yourselves, using *“WYSIWYG”*.\n\nWarning, you still need to have basic IT and security knowledge to be able to securely create such endpoints!\n\nThe point is that these endpoints accepts either code, natural language, or a combination. Then it executes the resulting code **on the server**, and returns the response back to caller.\n\nSince everything can be capability constrained using RBAC, you can generate endpoints such as:\n\nFor then to have these guys’ agents freely generate whatever code they need, within the capability constraints declared in your policies. And optionally authenticate their existing MCP enabled harness, using OIDC, optionally on their own infra (with a little bit of effort). Think *“lambda function in Claude, Codex, etc, transparently given correct access to everything in anything the company has of private data”* - Allowing the AGENT to decide what CODE it actually needs, instead of deterministically create an *“API”* before hand …\n\nCheck out the following video where I’m illustrating the concept ==> [https://www.youtube.com/watch?v=pzdTfe2Sg_A](https://www.youtube.com/watch?v=pzdTfe2Sg_A)", "url": "https://wpnews.pro/news/how-to-securely-open-up-your-server-for-rce-and-lambda-functions", "canonical_source": "https://discuss.huggingface.co/t/how-to-securely-open-up-your-server-for-rce-and-lambda-functions/180660#post_1", "published_at": "2026-09-21 07:21:36+00:00", "updated_at": "2026-09-21 07:22:49.830999+00:00", "lang": "en", "topics": ["ai-agents", "agent-protocols", "developer-tools"], "entities": ["Claude", "Codex", "MCP", "OIDC", "RBAC"], "alternates": {"html": "https://wpnews.pro/news/how-to-securely-open-up-your-server-for-rce-and-lambda-functions", "markdown": "https://wpnews.pro/news/how-to-securely-open-up-your-server-for-rce-and-lambda-functions.md", "text": "https://wpnews.pro/news/how-to-securely-open-up-your-server-for-rce-and-lambda-functions.txt", "jsonld": "https://wpnews.pro/news/how-to-securely-open-up-your-server-for-rce-and-lambda-functions.jsonld"}}