CVE-2026-92788
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
Coze Studio through 0.5.1 fails to validate that table names in workflow SQL customization nodes belong to the caller's workspace. Authenticated attackers can enumerate predictable table identifiers and execute SQL statements against other workspaces' memory databases to read, insert, or delete data.
Risk Assessment
Authenticated users can access and modify data belonging to other workspaces, leading to a breach of data isolation and information integrity. This may result in leakage or loss of other tenants' data.
Recommendation
Upgrade Coze Studio to a version newer than 0.5.1 and implement validation that table names belong to the caller's workspace before executing SQL.
Other vulnerabilities in Coze Studio
See all- CVE-2026-92795Medium
Coze Studio through 0.5.1 fails to restrict the server URL supplied when registering plugin tools, allowing authenticated users to make the backend fetch internal services. Attackers can construct plugin requests to access cloud metadata endpoints and internal services reachable only from the backend network, reading responses containing sensitive information.
- CVE-2025-9604Low
coze-studio up to 0.2.4 uses a hard-coded cryptographic key in backend/domain/plugin/encrypt/aes.go (AuthSecretKey/StateSecretKey/OAuthTokenSecretKey). The attack can be remote but is considered difficult and highly complex. The vendor recommended deploying a patch and plans user-defined key management via configuration.
Original NVD description (English source)
Coze Studio through 0.5.1 fails to validate that table names in workflow SQL customization nodes belong to the caller's workspace. Authenticated attackers can enumerate predictable table identifiers and execute SQL statements against other workspaces' memory databases to read, insert, or delete data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS