Coze Studio
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Coze Studio.
By the Year
In 2026 there have been 4 vulnerabilities in Coze Studio with an average score of 8.3 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 4 | 8.30 |
It may take a day or so for new Coze Studio vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Coze Studio Security Vulnerabilities
Coze Studio <0.5.0: Untrusted Python subprocess in workflow code nodes
CVE-2026-77934
8.7 - High
- October 20, 2026
Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 subprocess. Attackers can bypass the regex import filter with __import__('subprocess') to run commands, stealing environment variables, model API keys, and accessing MySQL, MinIO, Redis and etcd.
Insecure Default Initialization of Resource
Insecure Direct Obj Ref in Coze Studio <=0.5.1 Workflow Mgmt Allows Data Leakage
CVE-2026-77935
8.7 - High
- October 20, 2026
Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to access other spaces' workflows by supplying foreign workflowIDs. Attackers can pair their own spaceID with another tenant's workflowID in save, update_meta, batch_delete, canvas, test_run and nodeDebug routes to read, run, overwrite or delete workflows.
Insecure Direct Object Reference / IDOR
Coze Studio 0.5.1 Authenticated Server URL Disclosure (SSRF)
CVE-2026-92795
7.1 - High
- September 16, 2026
Coze Studio through 0.5.1 fails to restrict the server URL supplied when registering plugin tools, allowing authenticated users to make the backend fetch internal services. Attackers can construct plugin requests to access cloud metadata endpoints and internal services reachable only from the backend network, reading responses containing sensitive information.
SSRF
Coze Studio 0.5.1 SQL Injection via unvalidated table names
CVE-2026-92788
8.7 - High
- September 16, 2026
Coze Studio through 0.5.1 fails to validate that table names in workflow SQL customization nodes belong to the caller's workspace. Authenticated attackers can enumerate predictable table identifiers and execute SQL statements against other workspaces' memory databases to read, insert, or delete data.
AuthZ
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Coze Studio or by Coze? Click the Watch button to subscribe.
