Vendor
high
advisory
Insecure Direct Object Reference in Coze Studio workflow.go
1 TTP 1 CVECoze Studio versions up to 0.5.1 are vulnerable to an IDOR flaw in workflow.go allowing authenticated users to perform unauthorized operations on other tenants workflows.
Coze Studio
idor
web-vulnerability
cloud
1t
1c
high
advisory
Insufficient Validation in Coze Studio Workflow SQL Nodes
1 TTP 1 CVECoze Studio versions up to 0.5.1 contain an input validation vulnerability in workflow SQL customization nodes allowing authenticated attackers to bypass workspace isolation and execute unauthorized SQL queries.
Coze Studio
web-vulnerability
sql-injection
multi-tenancy
cve-2026-92788
1t
1c