coze-dev has 4 CVEs on record. 4 were published in the last 90 days. The median CVSS is 8.6 (high).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.6
- Publish → KEV
- —
- Last 90 days
- 4 prev 0
Weakness classes
Products
- coze-studio 4
Worst active — by depth score
CVE-2026-77934High· 8.8Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner61CVE-2026-77935High· 8.3Coze Studio through 0.5.1 Cross-Space Workflow IDOR via Workflow API Handlers58CVE-2026-92788High· 8.8Coze Studio through 0.5.1 fails to validate that table names in workflow SQL customization nodes belong to the caller's workspace49CVE-2026-92795Medium· 6.5Coze Studio through 0.5.1 fails to restrict the server URL supplied when registering plugin tools, allowing authenticated users to make the backend fetch internal services48
coze-dev vulnerabilities
CVEs affecting coze-dev, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-77934High· 8.8PoCCoze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner
Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 subprocess. Attackers can bypass the regex import filter wit…
CVE-2026-77935High· 8.3PoCCoze Studio through 0.5.1 Cross-Space Workflow IDOR via Workflow API Handlers
Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to access other spaces' workflows by supplying foreign workflowIDs. Attackers can pair their own spaceID …
CVE-2026-92788High· 8.8Coze Studio through 0.5.1 fails to validate that table names in workflow SQL customization nodes belong to the caller's workspace
Coze Studio through 0.5.1 fails to validate that table names in workflow SQL customization nodes belong to the caller's workspace. Authenticated attackers can enumerate predictable table identifiers and execute SQL statements against oth…
CVE-2026-92795Medium· 6.5PoCCoze Studio through 0.5.1 fails to restrict the server URL supplied when registering plugin tools, allowing authenticated users to make the backend fetch internal services
Coze Studio through 0.5.1 fails to restrict the server URL supplied when registering plugin tools, allowing authenticated users to make the backend fetch internal services. Attackers can construct plugin requests to access cloud metadata…