coze-dev
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| coze-studio | 4 | – | Oct 20, 2026 |
Exploited and recent CVEs
- CVE-2026-77935 Coze Studio through 0.5.1 Cross-Space Workflow IDOR via Workflow API Handlers 0.4%
- CVE-2026-77934 Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner 0.7%
- CVE-2026-92795 Coze Studio through 0.5.1 Server-Side Request Forgery via Plugin 0.4%
- CVE-2026-92788 Coze Studio through 0.5.1 Cross-Tenant Database Access via Workflow SQL Node 0.5%