CVE-2026-77935
CVE-2026-77935 · Coze Studio through 0.5.1 Cross-Space Workflow IDOR via Workflow API Handlers
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to access other spaces' workflows by supplying foreign workflowIDs. Attackers can pair their own spaceID with another tenant's workflowID in save, update_meta, batch_delete, canvas, test_run and nodeDebug routes to read, run, overwrite or delete workflows.
CVSS 8.7 · Hoch · EPSS 0,4%
- Veröffentlicht
- Aktualisiert
Betroffene Produkte und Versionen
coze-studio
- Softwareversionen
- ≥ 0, ≤ 0.5.1: Betroffen (semver)
Keine Korrektur veröffentlicht
Originalquellen
- https://www.lasso.security/vulnerability-database/cve-2026-77935
- https://github.com/coze-dev/coze-studio/blob/72cecff858a5a18662c5d9d1a4764c53ebc98317/backend/application/workflow/workflow.go#L303
- https://www.vulncheck.com/advisories/coze-studio-through-0.5.1-cross-space-workflow-idor-via-workflow-api-handlers
- https://nvd.nist.gov/vuln/detail/CVE-2026-77935