https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-21T20:26:50.944338+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-77935 CVE-2026-77935 — Coze Studio through 0.5.1 Cross-Space Workflow IDOR via Workflow API Handlers 2026-10-21T20:26:50.946517+00:00

Affected: coze-dev coze-studio

Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to access other spaces' workflows by supplying foreign workflowIDs. Attackers can pair their own spaceID with another tenant's workflowID in save, update_meta, batch_delete, canvas, test_run and nodeDebug routes to read, run, overwrite or delete workflows.