What’s Vulnerable › Vulnerabilities

CVE-2026-77934: Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-20 · updated 2026-10-20
• Weakness: CWE-1188

Description

Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 subprocess. Attackers can bypass the regex import filter with __import__('subprocess') to run commands, stealing environment variables, model API keys, and accessing MySQL, MinIO, Redis and etcd.

Affected products

• coze-dev coze-studio: before 0.5.0 — fixed in 0.5.0

How to fix

Upgrade to a fixed version: coze-dev coze-studio 0.5.0. Check the vendor advisory for mitigations.

References

• https://github.com/coze-dev/coze-studio/blob/ffec252d9e2600f61d49b8228a642335e84d5496/docker/.env.example#L234
• https://github.com/coze-dev/coze-studio/commit/fcf40d1008c100108c23be051a49950283f2c2cf
• https://www.lasso.security/vulnerability-database/cve-2026-77934
• https://www.vulncheck.com/advisories/coze-studio-before-0.5.0-rce-via-unsandboxed-local-python-code-runner

Get alerted when CVE-2026-77934 or the next vulnerability affects your stack