Server-Side Request Forgery in Coze Studio Plugin by Coze Studio
CVE-2026-92795

7.1HIGH

Key Information:

Vendor

Coze-dev

Status
Coze-studio
Vendor
CVE Published:
16 September 2026

What is CVE-2026-92795?

Coze Studio versions up to 0.5.1 exhibit a vulnerability that permits authenticated users to manipulate server URL parameters while registering plugin tools. This flaw allows attackers to orchestrate plugin requests that can access sensitive internal services and cloud metadata endpoints. Such unauthorized access can lead to the exposure of private information, significantly compromising the security of the backend network.

Affected Version(s)

coze-studio 0 <= 0.5.1

References

https://github.com/coze-dev/coze-studio/issues/2711
issue-tracking
https://github.com/coze-dev/coze-studio
product
https://github.com/coze-dev/coze-studio/blob/22275b1c2661...
technical-description

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

George Chen
.