Coze Studio <0.5.0: Untrusted Python subprocess in workflow code nodes
CVE-2026-77934 Published on October 20, 2026
Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner
Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 subprocess. Attackers can bypass the regex import filter with __import__('subprocess') to run commands, stealing environment variables, model API keys, and accessing MySQL, MinIO, Redis and etcd.
Vulnerability Analysis
CVE-2026-77934 is exploitable with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.
Weakness Type
Insecure Default Initialization of Resource
The software initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.
Products Associated with CVE-2026-77934
Want to know whenever a new CVE is published for Coze Studio? stack.watch will email you.
Affected Versions
coze-dev coze-studio:- Before 0.5.0 is affected.