Read the docs
TI-2026-76664 Aliases CVE-2026-77934

Unsandboxed Python code runner in Coze Studio allows command execution

Priority HIGH 73CWE-1188Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

Coze Studio before 0.5.0 runs workflow Python code nodes in an unsandboxed python3 subprocess under an insecure default configuration (CWE-1188). Any registered user can run commands by bypassing the regex import filter with __import__('subprocess'), reaching environment variables, model API keys, and MySQL, MinIO, Redis and etcd. A public exploit is linked in the references.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Description from the CNA

Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 subprocess. Attackers can bypass the regex import filter with __import__('subprocess') to run commands, stealing environment variables, model API keys, and accessing MySQL, MinIO, Redis and etcd.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00669 52nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix Fixed coze-studio (coze-dev): 0.5.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
coze-devcoze-studiobefore 0.5.00.5.0Patch availableCNA
  • coze-studio Vendorcoze-dev Affected before 0.5.0 Fixed in 0.5.0 Patch available CNA

Remediation

Upgrade Coze Studio to version 0.5.0 or later, which is the fixed version.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

  • Fix · CNA coze-studio (coze-dev) Fixed in 0.5.0

Timeline

  1. 2026-10-20 Threatist record created from CVE-2026-77934
  2. 2026-10-20 CISA SSVC decision points changed
  3. 2026-10-20 Priority changed: MEDIUM → HIGH
  4. 2026-10-25 EPSS moved to the 50th–90th percentile

References

Exploit 1

Patch 1

Other 1

  • TI-2026-76665 Insecure direct object reference in Coze Studio workflow API CVSS 4.0HIGH 8.7
  • TI-2026-62536 Coze Studio through 0.5.1 Server-Side Request Forgery via Plugin CVSS 4.0HIGH 7.1
  • TI-2026-62529 Coze Studio through 0.5.1 Cross-Tenant Database Access via Workflow SQL Node CVSS 4.0HIGH 8.7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences