CVE-2026-92788highCWE-863

CVE-2026-92788: high-severity vulnerability in coze-dev coze-studio

Coze Studio through 0.5.1 Cross-Tenant Database Access via Workflow SQL Node

Published · Updated

Follow this CVE+ Monitor coze-studio

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.7epss 0.5%
Coze Studio through 0.5.1 fails to validate that table names in workflow SQL customization nodes belong to the caller's workspace. Authenticated attackers can enumerate predictable table identifiers and execute SQL statements against other workspaces' memory databases to read, insert, or delete data.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
coze-dev · coze-studio
Related CVEs — coze-dev coze-studio

In the same product, most dangerous first.

CVE-2026-77934HIGHCoze Studio before 0.5.0 RCE via Unsandboxed Local Python Code RunnerEPSS 0.7%CVE-2026-92795HIGHCoze Studio through 0.5.1 Server-Side Request Forgery via PluginEPSS 0.4%CVE-2026-77935HIGHCoze Studio through 0.5.1 Cross-Space Workflow IDOR via Workflow API HandlersEPSS 0.4%