rootpwn

critical · CVSS v3 8.8 · CVSS v4 8.7

CVE-2026-92788

Coze Studio versions up to 0.5.1 allow authenticated users to run SQL queries that reference tables from other workspaces because the system

Overview

Coze Studio versions up to 0.5.1 allow authenticated users to run SQL queries that reference tables from other workspaces because the system does not validate table ownership. This flaw enables data reading, insertion, or deletion across workspaces, effectively bypassing workspace isolation.

Description

Coze Studio through 0.5.1 fails to validate that table names in workflow SQL customization nodes belong to the caller's workspace. Authenticated attackers can enumerate predictable table identifiers and execute SQL statements against other workspaces' memory databases to read, insert, or delete data.

Impact

{'confidentiality': 'Unauthorized disclosure of data from other workspaces.', 'integrity': 'Potential unauthorized modification or deletion of data in other workspaces.', 'availability': 'Possible disruption of other workspaces through destructive queries.'}

Remediation

['Upgrade to Coze Studio 0.5.2 or later where the table‑ownership check is enforced.', 'If an upgrade is not immediately possible, disable or restrict the SQL customization node feature for all users, or enforce that only tables belonging to the caller’s workspace can be referenced.', 'Apply least‑privilege access controls and monitor for anomalous SQL activity across workspaces.', 'Consider network segmentation or isolated database instances per workspace to reduce blast radius.']

Risk context

Critical severity with a CVSS v3 score of 8.8. The vulnerability is exploitable by any authenticated user, making it a high‑priority issue that should be addressed promptly.

Affected products

  • Coze Studio 0.5.1
  • Coze Studio <0.5.1

Scores

Severity
critical
CVSS v2
9
CVSS v3
8.8
CVSS v4
8.7
EPSS
—

SQL Injection Privilege Escalation Data Exfiltration Coze Studio Critical Authentication Bypass Database Security

← All CVEs

Related CVEs

critical

CVE-2026-86341

CVE‑2026‑86341 is a critical access‑control flaw that allows an attacker to bypass deployment approval checks by disabling strict policies after a deployment object has been altered. The vulnerability can silently enable unapproved code changes to reach production, compromising the integrity of the deployment pipeline.

View analysis

critical

CVE-2026-76460

A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request to an affected API endpoint. A successful exploit could allow the attacker to gain unauthorized access to the affected device by bypassing the web-based management interface.

View analysis

critical

CVE-2026-92748

BC Security Empire before 6.7.1 fails to validate the multipart filename parameter in upload endpoints, allowing authenticated operators to write files to arbitrary paths on the C2 server. Attackers can use path traversal sequences in the filename to bypass directory containment and write malicious files to sensitive locations for code execution.

View analysis

critical

CVE-2026-92749

SafeLine through 9.4.1 derives the management console session-signing secret from a time-seeded math/rand generator, allowing attackers to reconstruct the key offline. Unauthenticated remote attackers who can bound the install timestamp can regenerate the secret and forge valid administrator session cookies to gain control of protected sites.

View analysis