CVE-2026-77935: Coze Studio through 0.5.1 Cross-Space Workflow IDOR via Workflow API Handlers
Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to access other spaces' workflows by supplying foreign workflowIDs. Attackers can pair their own spaceID with another tenant's workflowID in save, updatemeta, batchdelete, canvas, testrun and nodeDebug routes to read, run, overwrite or delete workflows.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker must be authenticated to Coze Studio and have sufficient access to use the affected workflow API routes. No user interaction is required, and the attack can be performed remotely.
What access can an attacker gain across spaces?
By combining their own spaceID with a workflowID belonging to another space, an attacker may read or run the other space's workflows. The affected handlers also permit overwriting or deleting workflows.
Which operations should be reviewed for cross-space authorization failures?
Review the save, update_meta, batch_delete, canvas, test_run, and nodeDebug workflow routes. These handlers are identified as accepting foreign workflowIDs when paired with an attacker-controlled spaceID.
Are default deployments affected?
The available information identifies Coze Studio through version 0.5.1 as affected, but does not state whether any configuration change is required or whether all default deployments expose the vulnerable routes.