CVE-2026-77934: Initialization of a Resource with an Insecure Default in coze-dev coze-studio

CVE-2026-77934 describes a vulnerability in Coze Studio prior to version 0.5.0 where the default configuration permits registered users to execute arbitrary commands via workflow code nodes executed in an unsandboxed Python 3 subprocess. The vulnerability arises because the regex import filter can be bypassed using Python's __import__('subprocess') function, enabling attackers to run arbitrary system commands. This can lead to theft of sensitive environment variables, API keys, and unauthorized access to backend services including MySQL, MinIO, Redis, and etcd.

An attacker with a registered user account can execute arbitrary commands on the host system with the privileges of the Coze Studio process. This can lead to disclosure of sensitive environment variables and API keys, as well as unauthorized access to critical backend services such as MySQL, MinIO, Redis, and etcd. The vulnerability has a high CVSS 4.0 score of 8.7, indicating significant potential impact on confidentiality, integrity, and availability.

No official patch or fix is currently documented. Users should upgrade to Coze Studio version 0.5.0 or later once available, as versions prior to 0.5.0 are affected. Until a fix is released, restrict access to trusted users only and consider disabling or restricting workflow code node execution. Monitor vendor advisories for updates on remediation.