CVE record · 1 source
CVE-2026-77934
CVSS 8.8Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code…
- Vendor
- Oracle, MinIO
- Product
- MySQL, Redis / Valkey, etcd / CoreDNS, MinIO
- CVSS
- 8.8
- EPSS
- 0.007 (p52)
- Exposure class
- Database, Developer platform, Storage / NAS
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code…
Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 subprocess. Attackers can bypass the regex import…