CVE-2026-77935 | Coze Studio up to 0.5.1 Workflow workflow.go workflowIDs/spaceID resource injection

October 20, 2026 Yanac

A vulnerability classified as critical was found in Coze Studio up to 0.5.1. The affected element is an unknown function of the file workflow.go of the component Workflow. The manipulation of the argument workflowIDs/spaceID results in improper control of resource identifiers.

This vulnerability is cataloged as CVE-2026-77935. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More