Read the docs

coze-dev

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

coze-dev records in CISA KEV

No coze-dev vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2026-76665 CVE-2026-77935

Insecure direct object reference in Coze Studio workflow API

Priority HIGH 73

Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to access other spaces' workflows by supplying foreign workflowIDs.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00412 Published 2026-10-20 No fix listed CWE-639
TI-2026-76664 CVE-2026-77934

Unsandboxed Python code runner in Coze Studio allows command execution

Priority HIGH 73

Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 subprocess.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00669 Published 2026-10-20 Fixed in 0.5.0 CWE-1188
TI-2026-62536 CVE-2026-92795 · GHSA-mc6j-cg9w-v46r

Coze Studio through 0.5.1 Server-Side Request Forgery via Plugin

Priority MEDIUM 64

Coze Studio through 0.5.1 fails to restrict the server URL supplied when registering plugin tools, allowing authenticated users to make the backend fetch internal services.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00415 Published 2026-09-16 No fix listed CWE-918
Open these records in search →