EUVD-2026-81058
GHSA-mc6j-cg9w-v46r
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Authenticated user (PR:L) triggers backend fetches over the network (AV:N/AC:L); blind/read SSRF exposing metadata credentials gives C:H with no integrity or availability impact and no CVSS scope change.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
3DescriptionCVE.org
Coze Studio through 0.5.1 fails to restrict the server URL supplied when registering plugin tools, allowing authenticated users to make the backend fetch internal services. Attackers can construct plugin requests to access cloud metadata endpoints and internal services reachable only from the backend network, reading responses containing sensitive information.
AnalysisAI
Server-side request forgery in Coze Studio through version 0.5.1 allows an authenticated user who can register or configure a plugin tool to supply an arbitrary server URL, causing the backend to issue HTTP requests to internal-only destinations on the attacker's behalf. The primary risk is confidentiality rather than code execution: responses from cloud metadata endpoints (for example 169.254.169.254) or other services reachable only from the backend network can be read back through the plugin mechanism, potentially exposing credentials, tokens, and internal service data. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires an authenticated Coze Studio account (PR:L) with the ability to register or configure plugin tools; the flaw is that the plugin-tool registration does not validate or restrict the supplied server URL, so the backend will issue HTTP requests to arbitrary attacker-chosen destinations. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a moderate-priority, credentialed SSRF rather than a critical remote-takeover flaw. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch version was identified in the available data at time of analysis, so remediation must currently rely on mitigation until an upstream fix appears alongside the tracking issue at https://github.com/coze-dev/coze-studio/issues/2711; monitor the project repository and the VulnCheck advisory at https://www.vulncheck.com/advisories/coze-studio-through-0.5.1-server-side-request-forgery-via-plugin for a fixed release and upgrade as soon as one is tagged. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, restrict the ability to register or configure plugin tools in Coze Studio through version 0.5.1 to only trusted administrators, review existing plugin configurations for any unauthorized or suspicious URLs, block outbound traffic from Coze Studio servers to the cloud metadata IP 169.254.169.254 and internal RFC1918 address ranges, and monitor logs for anomalous outbound HTTP requests. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Denial of service against HTTP/2 server implementations allows remote unauthenticated attackers to exhaust server resour
The net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and there
Critical certificate validation bypass in Go crypto/tls during session resumption. If ClientCAs or RootCAs fields are mu
net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading to an authorization by
Casdoor through 4.4.0 exposes its instance-wide built-in JWT signing private key unmasked through the /api/get-certs and
The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used, does not validate the import pa
The net/http library in net/textproto/reader.go in Go before 1.4.3 does not properly parse HTTP header keys, which allow
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection. Rated high severity (CVS
Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get" remote command executi
Denial of service in Go's net/url package allows remote unauthenticated attackers to crash applications via malformed UR
The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query p
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today