Threats tagged 'ghsa-77xw-26q5-6wjg'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	EPSS 0.5%	CVE-2026-92788coze-studio · Incorrect Authorization High8.7EPSS 0.5%2026-09-16CVE Database V5CVE-2026-92788 Coze Studio versions up to 0.5.1 contain an authorization flaw where SQL customization nodes do not verify that table names belong to the caller's workspace. This allows authenticated attackers to enumerate table identifiers and perform unauthorized SQL operations on other workspaces' memory databases, including reading, inserting, or deleting data. The vulnerability has a high severity with a CVSS score of 8.7. EPSS 0.5%Vulnerability coze-dev #ghsa-77xw-26q5-6wjg	CVE Database V5	2026-09-16

Page 1 of 1