Vendor
Coze Studio versions prior to 0.5.0 allow authenticated users to execute arbitrary commands by bypassing sandbox protections in Python workflow nodes.