---
id: CVE-2026-77934
title: Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner
summary: >-
  Coze Studio before 0.5.0 contains an insecure default configuration that
  allows any registered user to execute commands by running workflow code nodes
  in an unsandboxed python3 subprocess. Attackers can bypass the regex import
  filter wit…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-1188
vendor: coze-dev
product: coze-studio
affected:
  - coze-studio < 0.5.0
published: '2026-10-20'
updated: '2026-10-20'
sourceUpdated: '2026-10-20T00:46:12.780Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-77934'
references:
  - url: 'https://www.lasso.security/vulnerability-database/cve-2026-77934'
    label: Lasso.security Advisory
  - url: >-
      https://github.com/coze-dev/coze-studio/commit/fcf40d1008c100108c23be051a49950283f2c2cf
  - url: >-
      https://github.com/coze-dev/coze-studio/blob/ffec252d9e2600f61d49b8228a642335e84d5496/docker/.env.example#L234
  - url: >-
      https://www.vulncheck.com/advisories/coze-studio-before-0.5.0-rce-via-unsandboxed-local-python-code-runner
    label: >-
      VulnCheck Advisory: Coze Studio before 0.5.0 RCE via Unsandboxed Local
      Python Code Runner
tags:
  - cve.org
ingestedAt: '2026-10-20T01:49:42.626Z'
---

## Overview

Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 subprocess. Attackers can bypass the regex import filter with __import__('subprocess') to run commands, stealing environment variables, model API keys, and accessing MySQL, MinIO, Redis and etcd.

## Affected

- `coze-studio < 0.5.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.