EUVD-2026-81051
GHSA-77xw-26q5-6wjg
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network, low-complexity, authenticated (PR:L) attacker reads and modifies (insert/delete=integrity) cross-workspace data; C:H/I:H, A:N as no service-level denial is asserted; S:U per vendor scoping.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
4DescriptionCVE.org
Coze Studio through 0.5.1 fails to validate that table names in workflow SQL customization nodes belong to the caller's workspace. Authenticated attackers can enumerate predictable table identifiers and execute SQL statements against other workspaces' memory databases to read, insert, or delete data.
AnalysisAI
Improper authorization in Coze Studio through 0.5.1 lets an authenticated user (CVSS PR:L) abuse the workflow SQL customization node to reach memory-database tables belonging to other workspaces, because referenced table names are never validated against the caller's own workspace. By enumerating predictable table identifiers, the attacker can read, insert, or delete data in another tenant's memory database, yielding high confidentiality and integrity impact within the affected multi-tenant deployment (our assessment rates this CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires an authenticated Coze Studio account (PR:L) on a multi-tenant/multi-workspace deployment and use of the workflow SQL customization node feature. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuine authenticated cross-tenant authorization flaw (CWE-863), not a high-CVSS-but-low-risk item, though its severity is bounded by prerequisites. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch identified at time of analysis: the available references are a GitHub issue (https://github.com/coze-dev/coze-studio/issues/2710), repository source links, and a VulnCheck advisory, none of which name a fixed release, so administrators should track issue 2710 and the repository for a patched version before upgrading. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory every Coze Studio instance and confirm which are running 0.5.1 or earlier, then determine which of those host more than one workspace or tenant on a shared memory-database backend, since single-tenant installations have little exposure through this path; on confirmed multi-tenant deployments, disable the workflow SQL customization node where operationally possible, otherwise restrict it to a tightly controlled group, and review logs for repeated or enumerating lookups of table identifiers outside a user's own workspace. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Denial of service against HTTP/2 server implementations allows remote unauthenticated attackers to exhaust server resour
The net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and there
Critical certificate validation bypass in Go crypto/tls during session resumption. If ClientCAs or RootCAs fields are mu
net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading to an authorization by
Casdoor through 4.4.0 exposes its instance-wide built-in JWT signing private key unmasked through the /api/get-certs and
The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used, does not validate the import pa
The net/http library in net/textproto/reader.go in Go before 1.4.3 does not properly parse HTTP header keys, which allow
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection. Rated high severity (CVS
Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get" remote command executi
Denial of service in Go's net/url package allows remote unauthenticated attackers to crash applications via malformed UR
The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query p
Same weakness CWE-863 – Incorrect Authorization
View allShare
External POC / Exploit Code
Leaving vuln.today