Skip to content
OpenAdvisories

Vendor

coze-dev

4 known vulnerabilities.

Products

coze-studio 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-92795

    Coze Studio through 0.5.1 Server-Side Request Forgery via Plugin

    Coze Studio through 0.5.1 fails to restrict the server URL supplied when registering plugin tools, allowing authenticated users to make the backend fetch internal services. Attackers can construct plugin requests to access cloud metadata endpoints and interna…

    coze-dev coze-studio