CVE-2026-92795 PUBLISHED

Coze Studio through 0.5.1 Server-Side Request Forgery via Plugin

Assigner: VulnCheck
Reserved: 16.09.2026 Published: 16.09.2026 Updated: 16.09.2026

Coze Studio through 0.5.1 fails to restrict the server URL supplied when registering plugin tools, allowing authenticated users to make the backend fetch internal services. Attackers can construct plugin requests to access cloud metadata endpoints and internal services reachable only from the backend network, reading responses containing sensitive information.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
CVSS Score: 7.1

Product Status

Vendor coze-dev
Product coze-studio
Versions Default: unaffected
  • affected from 0 to 0.5.1 (incl.)

Credits

  • George Chen finder

References

Problem Types

  • Server-Side Request Forgery (SSRF) CWE