Coze Studio: Insecure direct object reference in workflow API
Summary
Coze Studio through 0.5.1 checks that an authenticated user belongs to the space named in a request, but not that the targeted workflow belongs to that space. An attacker with any valid account in one space can supply a workflow ID from another space to read, run, overwrite or delete that workflow, including its canvas, node configuration and prompt templates. The flaw affects all deployment configurations, including the default.
Affected
- Coze Studio 0 to 0.5.1 (CVE record: affected up to and including 0.5.1)
- Affected routes: save, update_meta, batch_delete, canvas, test_run and nodeDebug in backend/application/workflow/workflow.go
Fixed in
Unknown. No fixed version has been published in the sources reviewed. Upgrade to a release later than 0.5.1 once the vendor confirms a fix.
Workaround
Unknown. No vendor workaround is listed in the sources reviewed.
Exploitation
- The CISA SSVC assessment in the CVE record lists exploitation as 'poc' (a proof of concept exists) and automatable as 'no'.
- No public exploitation or in-the-wild use has been reported as of 1 Nov 2026.
- Not listed in CISA KEV.
Our recommendation
- Identify all Coze Studio instances and check whether they serve multiple users or spaces; prioritise multi-space and internet-facing instances.
- Restrict network access to trusted users and review which accounts exist, including self-registration.
- Monitor for workflow changes, deletions or test runs that the owning team did not initiate, and review audit logs.
- Apply the vendor fix as soon as it is available and verify the installed version afterwards.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- CVE record and CVSS (OSV) osv.dev
- VulnCheck advisory www.vulncheck.com
- Lasso vulnerability analysis www.lasso.security
- Vulnerable code location (workflow.go) github.com
- Strix CVE summary www.strix.ai
- OpenCVE (VulnCheck data) app.opencve.io
- VulDB entry vuldb.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 01:37.
Original description (NVD)
Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to access other spaces' workflows by supplying foreign workflowIDs. Attackers can pair their own spaceID with another tenant's workflowID in save, update_meta, batch_delete, canvas, test_run and nodeDebug routes to read, run, overwrite or delete workflows.
NVD references (3)
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.