Coze Studio versions up to 0.5.1 allow an authenticated user to specify arbitrary table names in custom SQL nodes. The application does not verify that the table belongs to the user’s own workspace, enabling the attacker to read, insert, or delete data in other workspaces’ memory databases. This bypasses the intended authorization controls (CWE‑863) and results in a confidentiality and integrity compromise for other tenants.

The affected product is Coze Studio by coze‑dev. All releases through version 0.5.1 are vulnerable. No specific sub‑version detail is available beyond the 0.5.1 cutoff.

The vulnerability has a CVSS score of 8.7, indicating high severity. The EPSS score is less than 1%, suggesting the likelihood of exploitation is currently low but non‑zero. It is not listed in the CISA KEV catalog. The attack requires a legitimate authenticated account with access to workflow editing features; the attacker can then supply SQL statements that reference tables outside their own workspace. This allows enumeration of predictable table identifiers and direct manipulation of another tenant’s data.