CVE-2026-77934
Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner
- State
- Published
- Severity
- 8.7 High
- Published
- Oct 20, 2026
- Updated
- Oct 20, 2026
- Reserved
- Aug 21, 2026
Description
Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 subprocess. Attackers can bypass the regex import filter with __import__('subprocess') to run commands, stealing environment variables, model API keys, and accessing MySQL, MinIO, Redis and etcd.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 8.8 High | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | VulnCheck |
Weaknesses
- CWE-1188 Initialization of a Resource with an Insecure Default
Affected Products
| Product | Versions |
|---|---|
coze-studiocoze-dev |
|
References
- Lasso.security Advisorytechnical-descriptionexploit
- https://github.com/coze-dev/coze-studio/commit/fcf40d1008c100108c23be051a49950283f2c2cfpatch
- https://github.com/coze-dev/coze-studio/blob/ffec252d9e2600f61d49b8228a642335e84d5496/docker/.env.example#L234technical-description
- VulnCheck Advisory: Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runnerthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.