CVE ID :CVE-2026-77935 Published : Oct. 20, 2026, 1:17 a.m. | 48 minutes ago Description :Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to access other spaces' workflows by supplying foreign workflowIDs....