Coze Studio
Approved changes feed: RSS · Atom
cpe:2.3:a:coze-dev:coze-studio:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Coze Dev (906e3651-1517-510e-88d0-af7533d64bb6) |
|---|---|
| Product | Coze Studio (2187d0c4-7346-5e05-a4de-cb6f40aaa516) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-77934 |
vulnerable | 2026-11-03 10:15:18.049040 |
Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner
HIGH (8.8)
Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 subprocess. Attackers can bypass the regex import filter with __import__('subprocess') to run commands, stealing environment variables, model API keys, and accessing MySQL, MinIO, Redis and etcd.
Published: 2026-10-20T00:46:12.780Z
Updated: 2026-10-20T14:29:04.949Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-77935 |
vulnerable | 2026-11-03 10:15:17.961478 |
Coze Studio through 0.5.1 Cross-Space Workflow IDOR via Workflow API Handlers
HIGH (8.3)
Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to access other spaces' workflows by supplying foreign workflowIDs. Attackers can pair their own spaceID with another tenant's workflowID in save, update_meta, batch_delete, canvas, test_run and nodeDebug routes to read, run, overwrite or delete workflows.
Published: 2026-10-20T00:46:13.474Z
Updated: 2026-10-20T13:29:43.391Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-92795 |
vulnerable | 2026-10-13 12:28:53.554497 |
Coze Studio through 0.5.1 Server-Side Request Forgery via Plugin
MEDIUM (6.5)
Coze Studio through 0.5.1 fails to restrict the server URL supplied when registering plugin tools, allowing authenticated users to make the backend fetch internal services. Attackers can construct plugin requests to access cloud metadata endpoints and internal services reachable only from the backend network, reading responses containing sensitive information.
Published: 2026-09-16T20:32:49.712Z
Updated: 2026-09-17T15:04:55.507Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-92788 |
vulnerable | 2026-10-13 12:28:53.422381 |
Coze Studio through 0.5.1 Cross-Tenant Database Access via Workflow SQL Node
HIGH (8.8)
Coze Studio through 0.5.1 fails to validate that table names in workflow SQL customization nodes belong to the caller's workspace. Authenticated attackers can enumerate predictable table identifiers and execute SQL statements against other workspaces' memory databases to read, insert, or delete data.
Published: 2026-09-16T20:32:44.626Z
Updated: 2026-09-17T13:47:34.949Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.