EUVD-2026-81051

Coze Studio through 0.5.1 fails to validate that table names in workflow SQL customization nodes belong to the caller's workspace. Authenticated attackers can enumerate predictable table identifiers and execute SQL statements against other workspaces' memory databases to read, insert, or delete...

CVE-2026-92788

Coze Studio through version 0.5.1 is affected by a cross-tenant database access vulnerability in its workflow SQL customization nodes. The root cause is a missing validation that ensures table names in those nodes belong to the caller's workspace, allowing an authenticated attacker to enumerate p...

CVE-2026-92788: Incorrect Authorization

Coze Studio through 0.5.1 fails to validate that table names in workflow SQL customization nodes belong to the caller's workspace. Authenticated attackers can enumerate predictable table identifiers and execute SQL statements against other workspaces' memory databases to read, insert, or delete...