Entity · DiggingBeagle record
Coze Studio
Coze Studio is an open-source AI agent development platform with spaces, workflows and configurable code runners. Workspace ownership and process isolation are separate investigated boundaries. A development/debug deployment with CODE_RUNNER_TYPE=local can execute Python as a subprocess with access to connected resources; the specified production Deno/Pyodide runner does not take this exact route. A distinct cross-space workflow flaw checks membership in the user-supplied space without proving the requested workflow belongs to that space, so sandboxing the runner is not a fix for ownership. Both were controlled demonstrations without verified production victims. [Runner](db:CASE-2026-RADAR-COZE-LOCAL-RUNNER); [workflow authority](db:CASE-2026-RADAR-COZE-WORKFLOW-OWNERSHIP).
Record description
Coze Studio is an open-source AI agent development platform with spaces, workflows and configurable code runners. Workspace ownership and process isolation are separate investigated boundaries.
A development/debug deployment with CODE_RUNNER_TYPE=local can execute Python as a subprocess with access to connected resources; the specified production Deno/Pyodide runner does not take this exact route. A distinct cross-space workflow flaw checks membership in the user-supplied space without proving the requested workflow belongs to that space, so sandboxing the runner is not a fix for ownership. Both were controlled demonstrations without verified production victims. Runner; workflow authority.