coze-dev coze-studio

2 known vulnerabilities in coze-dev coze-studio, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-92795 CVSS 7.1 high Coze Studio through 0.5.1 fails to restrict the server URL supplied when registering plugin tools, allowing authenticated users to make…
CVE-2026-92788 CVSS 8.7 high Coze Studio through 0.5.1 fails to validate that table names in workflow SQL customization nodes belong to the caller's workspace…