https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T22:22:13.606271+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-370468 EUVD-2026-370468 2026-10-07T22:22:13.608676+00:00 EUVD-2026-370468 https://cve.radiocsirt.org/vuln/fkie_cve-2026-92788 fkie_cve-2026-92788 2026-10-07T22:22:13.608719+00:00

Coze Studio through 0.5.1 fails to validate that table names in workflow SQL customization nodes belong to the caller's workspace. Authenticated attackers can enumerate predictable table identifiers and execute SQL statements against other workspaces' memory databases to read, insert, or delete data.

 https://cve.radiocsirt.org/vuln/ghsa-77xw-26q5-6wjg GHSA-77xw-26q5-6wjg 2026-10-07T22:22:13.608766+00:00

Coze Studio through 0.5.1 fails to validate that table names in workflow SQL customization nodes belong to the caller's workspace. Authenticated attackers can enumerate predictable table identifiers and execute SQL statements against other workspaces' memory databases to read, insert, or delete data.