Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:bytedance:coze_studio:*:*:*:*:*:*:*:*

2 briefs RSS
high advisory

Insecure Direct Object Reference in Coze Studio workflow.go

Coze Studio versions up to 0.5.1 are vulnerable to an IDOR flaw in workflow.go allowing authenticated users to perform unauthorized operations on other tenants workflows.

Coze Studio idor web-vulnerability cloud
1t 1c
high advisory

Insufficient Validation in Coze Studio Workflow SQL Nodes

Coze Studio versions up to 0.5.1 contain an input validation vulnerability in workflow SQL customization nodes allowing authenticated attackers to bypass workspace isolation and execute unauthorized SQL queries.

Coze Studio web-vulnerability sql-injection multi-tenancy cve-2026-92788
1t 1c