CVE-2026-77934— Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner
Quick assessment
Affected
coze-dev coze-studio
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Coze Studio 在 0.5.0 版本之前存在不安全的默认配置，允许任何已注册用户通过在非沙箱的 Python3 子进程中运行工作流代码节点来执行命令。攻击者可以利用 绕过正则表达式导入过滤机制，从而执行任意命令，窃取环境变量、模型 API 密钥，并访问 MySQL、MinIO、Redis 和 etcd 等系统。
Possible ATT&CK Techniques 3 AI
T1003 · OS Credential Dumping T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-77934
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner
Source: CVE Program / CVE List V5
Vulnerability Description
Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 subprocess. Attackers can bypass the regex import filter with __import__('subprocess') to run commands, stealing environment variables, model API keys, and accessing MySQL, MinIO, Redis and etcd.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
不安全的默认资源初始化
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| coze-dev | coze-studio | 0 ~ 0.5.0 | - |
|
II. Public POCs for CVE-2026-77934
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-77934
请登录查看更多情报信息。
Other References for CVE-2026-77934 (3)
IV. Related Vulnerabilities
Same product: coze-studio
-
CVE-2026-77935
Coze Studio through 0.5.1 Cross-Space Workflow IDOR via Work -
CVE-2026-92795
Coze Studio through 0.5.1 Server-Side Request Forgery via Pl -
CVE-2026-92788
Coze Studio through 0.5.1 Cross-Tenant Database Access via W -
CVE-2026-7023
ByteDance coze-studio databaseTool database_impl.go ExecuteS -
CVE-2025-9604
coze-studio aes.go hard-coded key
Same weakness: CWE-1188
-
CVE-2026-77936
Letta through 0.16.8 Insecure Default Configuration Unauthen -
CVE-2026-109437
Cognition < 0.13.0 Unauthenticated RCE via Local Shell Backe -
CVE-2026-110769
holaOS through 2026.822.1 Missing Authorization in Channel-G -
CVE-2026-110631
Komodo through 2.3.3 Periphery Agent Unauthenticated RCE via -
CVE-2026-14765
Epic Games Unreal Engine Insecure Default URL Scheme Allowan
V. Comments for CVE-2026-77934
No comments yet