What’s Vulnerable › Products

coze-dev coze-studio vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your coze-dev coze-studio version is affected

Latest coze-dev coze-studio vulnerabilities

• CVE-2026-77935 — Coze Studio through 0.5.1 Cross-Space Workflow IDOR via Workflow API Handlers (CVSS 8.3)
• CVE-2026-77934 — Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner (CVSS 8.8)
• CVE-2026-92795 — Coze Studio through 0.5.1 Server-Side Request Forgery via Plugin (CVSS 6.5)
• CVE-2026-92788 — Coze Studio through 0.5.1 Cross-Tenant Database Access via Workflow SQL Node (CVSS 8.8)