# What is Remote Code Execution (RCE)?

> Remote code execution (RCE) is the capability or impact whereby an attacker causes code or commands of their choice to run on a target system from another system or network location.

- Canonical URL: https://yellowcube.eu/glossary/remote-code-execution/
- Publisher: Yellow Cube
- Language: en
- Contact: hello@yellowcube.eu

## Content

The code executes in a specific process, account, container, or service context, so the resulting access and damage depend on that context and on surrounding security boundaries.

RCE can result from many root causes, including code or command injection, unsafe deserialization, memory corruption, dangerous file processing, exposed administrative functions, or a chain of weaknesses. Some cases require authentication, user interaction, a particular configuration, or prior access. RCE describes the outcome rather than a flaw type.

### Key points

- **Potential effect:** Executed code may read or change data, disrupt service, create another access path, or act on connected systems, but only within capabilities available to the compromised context and reachable dependencies.
- **Assessment:** Establish the affected component, attack path, required access, interaction, privileges, execution context, reliability, mitigations, and observed evidence before assigning operational priority.
- **Defensive priorities:** Remove unnecessary exposure, apply validated corrections, constrain service privileges and outbound access, isolate workloads, monitor execution paths, and investigate suspected use as a potential incident.
- **Important limitation:** RCE does not automatically mean unauthenticated internet exploitation, administrative control, persistence, or complete system compromise. Sandboxing, least privilege, network controls, and other boundaries may reduce impact without correcting the underlying weakness.

### Related terms

[Exploit](<https://yellowcube.eu/glossary/exploit/>) · [Vulnerability](<https://yellowcube.eu/glossary/vulnerability/>) · [Buffer overflow](<https://yellowcube.eu/glossary/buffer-overflow/>) · [Application security](<https://yellowcube.eu/glossary/application-security/>) · [Remote access trojan (RAT)](<https://yellowcube.eu/glossary/remote-access-trojan/>)

### Sources

[MITRE ATT&CK T1210: Exploitation of Remote Services](https://attack.mitre.org/techniques/T1210/) · [CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')](https://cwe.mitre.org/data/definitions/77.html) · [CWE-502: Deserialization of Untrusted Data](https://cwe.mitre.org/data/definitions/502.html) · [CWE-787: Out-of-bounds Write](https://cwe.mitre.org/data/definitions/787.html)

## Attribution and scope

This Markdown representation is generated from the same approved content records as the canonical HTML page. Cite the canonical URL above when referencing this material. Product and service descriptions are informational; confirm project-specific requirements with Yellow Cube.