---
id: CVE-2026-92788
title: >-
  Coze Studio through 0.5.1 fails to validate that table names in workflow SQL
  customization nodes belong to the caller's workspace
summary: >-
  Coze Studio through 0.5.1 fails to validate that table names in workflow SQL
  customization nodes belong to the caller's workspace. Authenticated attackers
  can enumerate predictable table identifiers and execute SQL statements against
  oth…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-863
vendor: coze-dev
product: coze-studio
affected:
  - coze-studio <= 0.5.1
published: '2026-09-16'
updated: '2026-09-24'
sourceUpdated: '2026-09-24T20:48:01.433'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-92788'
references:
  - url: 'https://github.com/coze-dev/coze-studio'
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/coze-dev/coze-studio/blob/22275b1c2661d35344a7493cffe401e8cc61cf8e/backend/domain/memory/database/service/database_impl.go#L2203-L2250
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/coze-dev/coze-studio/blob/22275b1c2661d35344a7493cffe401e8cc61cf8e/backend/infra/rdb/impl/rdb/mysql.go#L825-L830
    label: disclosure@vulncheck.com
  - url: 'https://github.com/coze-dev/coze-studio/issues/2710'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/coze-studio-through-0.5.1-cross-tenant-database-access-via-workflow-sql-node
    label: disclosure@vulncheck.com
tags:
  - nvd
  - cve.org
epss: 0.00523
epssPercentile: 0.41967
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-09-17T13:47:22.504528Z'
ingestedAt: '2026-09-16T21:05:36.889Z'
---

## Overview

Coze Studio through 0.5.1 fails to validate that table names in workflow SQL customization nodes belong to the caller's workspace. Authenticated attackers can enumerate predictable table identifiers and execute SQL statements against other workspaces' memory databases to read, insert, or delete data.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.