Coze Studio

Everything Firewall Chronicle has reported about Coze Studio: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Coze Studio 0.5.0 Predecessors Exposed to Command Injection via Python Nodes

A default configuration flaw in Coze Studio allows registered users to execute unsandboxed Python code, potentially exposing sensitive credentials and internal services.

Oct 20, 2026

Vulnerabilities

Coze Studio IDOR CVE-2026-77935 Enables Cross-Tenant Workflow Manipulation Up to v0.5.1

An insecure direct object reference in Coze Studio through 0.5.1 allows authenticated users to access and manipulate workflows belonging to other tenants.

Oct 20, 2026