CVE-2026-77934
Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner
CVSS Score
8.8
EPSS Score
0.0%
EPSS Percentile
0th
Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 subprocess. Attackers can bypass the regex import filter with __import__('subprocess') to run commands, stealing environment variables, model API keys, and accessing MySQL, MinIO, Redis and etcd.
| CWE | CWE-1188 |
| Vendor | coze-dev |
| Product | coze-studio |
| Published | Oct 20, 2026 |
Stay Ahead of the Next One
Get instant alerts for coze-dev coze-studio
Be the first to know when new high vulnerabilities affecting coze-dev coze-studio are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
coze-dev / coze-studio
0 < 0.5.0
References
lasso.security: https://www.lasso.security/vulnerability-database/cve-2026-77934 github.com: https://github.com/coze-dev/coze-studio/commit/fcf40d1008c100108c23be051a49950283f2c2cf github.com: https://github.com/coze-dev/coze-studio/blob/ffec252d9e2600f61d49b8228a642335e84d5496/docker/.env.example#L234 vulncheck.com: https://www.vulncheck.com/advisories/coze-studio-before-0.5.0-rce-via-unsandboxed-local-python-code-runner
Credits
Noy Pearl Michael Sromin Ophir Dror