Skip to content
OpenAdvisories

Vendor

coze-dev

4 known vulnerabilities.

Products

coze-studio 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.3
    CVE-2026-77935

    Coze Studio through 0.5.1 Cross-Space Workflow IDOR via Workflow API Handlers

    Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to access other spaces' workflows by supplying foreign workflowIDs. Attackers can pair their own spaceID with another tenant's …

    coze-dev coze-studio
  • High 8.8
    CVE-2026-77934

    Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner

    Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 subprocess. Attackers can bypass the regex import filter with __import__('subproce…

    coze-dev coze-studio
  • High 8.8
    CVE-2026-92788

    Coze Studio through 0.5.1 Cross-Tenant Database Access via Workflow SQL Node

    Coze Studio through 0.5.1 fails to validate that table names in workflow SQL customization nodes belong to the caller's workspace. Authenticated attackers can enumerate predictable table identifiers and execute SQL statements against other workspaces' memory …

    coze-dev coze-studio