CVE-2026-77934

LOWCVSS 8.7 · HIGH

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 subprocess. Attackers can bypass the regex import filter with __import__('subprocess') to run commands, stealing environment variables, model API keys, and accessing MySQL, MinIO, Redis and etcd.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-1188

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post

Harsha Hegde@HarshaHegde021h
All 13 👇 DB-GPT: CVE-2026-77932 (9.8), CVE-2026-77933 (9.8) Letta: CVE-2026-77936 (9.8), CVE-2026-77937 Langchain-Chatchat: CVE-2026-75128 (9.8) piflow: CVE-2026-109442 (9.8) Coze Studio: CVE-2026-77934, CVE-2026-77935 Aix-DB: CVE-2026-77926 OpenSRE: CVE-2026-109444 JoySafeter: CVE-2026-109443 EvoScientist: CVE-2026-77930 LangAlpha: CVE-2026-109440 only coze studio has a fix so far (0.5.0) Full breakdown: https://severitydaily.com/ai-agent-frameworks-thirteen-records-vulncheck-lasso-cwe-306-cwe-1188-shipped-defaults-no-fixed-version/
0000056
14 followersView on X

Explore more

Back to dashboard