CVE-2026-77934

8.8High

Published 20 Oct 2026 · NVD status: Received · AI triage by gemini-3.8-flash

8.8High

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: None
Impact: Full C/I/A compromise
Weakness: CWE-1188

Impact

Authenticated registered users can achieve remote code execution to steal API keys, environment variables, and compromise internal services like MySQL, Redis, MinIO, and etcd. They only need standard account access to execute workflow code nodes.

Root cause

Workflow code nodes run in an unsandboxed local Python subprocess by default, and the import regex filter can be bypassed using __import__('subprocess').

Affected systems

Coze Studio before 0.5.0

CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Fix & remediation

Upgrade Coze Studio to version 0.5.0 or later. If unable to upgrade immediately, reconfigure the code execution environment away from the default unsandboxed local Python runner in the deployment settings.

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 subprocess. Attackers can bypass the regex import filter with __import__('subprocess') to run commands, stealing environment variables, model API keys, and accessing MySQL, MinIO, Redis and etcd.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-77934