Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: coze-dev Clear all filters
TI-2026-76665 CVE-2026-77935

Insecure direct object reference in Coze Studio workflow API

Priority HIGH 73

Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to access other spaces' workflows by supplying foreign workflowIDs.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00412 Published 2026-10-20 No fix listed CWE-639
TI-2026-76664 CVE-2026-77934

Unsandboxed Python code runner in Coze Studio allows command execution

Priority HIGH 73

Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 subprocess.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00669 Published 2026-10-20 Fixed in 0.5.0 CWE-1188
TI-2026-62536 CVE-2026-92795 · GHSA-mc6j-cg9w-v46r

Coze Studio through 0.5.1 Server-Side Request Forgery via Plugin

Priority MEDIUM 64

Coze Studio through 0.5.1 fails to restrict the server URL supplied when registering plugin tools, allowing authenticated users to make the backend fetch internal services.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00415 Published 2026-09-16 No fix listed CWE-918