Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code…
Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 subprocess. Attackers can bypass the regex import filter with __import__('subprocess') to run commands, stealing environment variables, model API keys, and accessing MySQL, MinIO, Redis and etcd.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Oracle, MinIO
- Product
- MySQL, Redis / Valkey, etcd / CoreDNS
- CVSS
- 8.8
- EPSS
- 0.007 (p52)
- Exposure class
- Database, Developer platform, Storage / NAS
Why it ranks 21 (Routine)
- CVSS 8.8 high
- Product class: database, developer platform
- Widely deployed vendor product (Oracle)
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-77934 on this site · NVD · CVE.org · Vulnpedia