Search
Find a vulnerability
Search criteria
1 vulnerability found for label-studio-sdk by HumanSignal
CVE-2026-121561 (GCVE-0-2026-121561)
Vulnerability from cvelistv5 – Published: 2026-11-03 15:17 – Updated: 2026-11-07 03:12
VLAI
EPSS
VEX
Title
Label Studio before 1.23.2 SSRF and Token Disclosure via Image Export Downloads
Summary
Label Studio before 1.23.2 (label-studio-sdk before 2.1.2) contains a server-side request forgery vulnerability that allows authenticated users to read internal URLs through image-bearing export formats. Attackers can import tasks with data.image pointing at internal services, export as YOLO or COCO with images to read responses, and spoof Host to capture the organization owner's API token.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-07 03:11 UTC
CWE
- CWE-918 - Server-Side Request Forgery (SSRF)
Assigner
VulnCheck
CNA
References
7 references
| URL | Tags |
|---|---|
| https://github.com/HumanSignal/label-studio/secur… | vendor-advisory |
| https://github.com/HumanSignal/label-studio/commi… | patch |
| https://github.com/HumanSignal/label-studio-sdk/c… | patch |
| https://github.com/HumanSignal/label-studio/blob/… | technical-description |
| https://github.com/HumanSignal/label-studio-sdk/b… | technical-description |
| https://github.com/HumanSignal/label-studio-sdk/b… | technical-description |
| https://www.vulncheck.com/advisories/label-studio… | third-party-advisory |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| HumanSignal | label-studio |
Affected:
0 , < 1.23.2
(semver)
|
|
| HumanSignal | label-studio-sdk |
Affected:
0 , < 2.1.2
(semver)
|
Date Public
2026-09-29 00:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-121561",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-07T03:11:49.232134Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-07T03:12:10.171Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/HumanSignal/label-studio/security/advisories/GHSA-6437-7wc6-gmx5"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageURL": "pkg:pypi/label-studio",
"product": "label-studio",
"repo": "https://github.com/HumanSignal/label-studio",
"vendor": "HumanSignal",
"versions": [
{
"lessThan": "1.23.2",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"packageURL": "pkg:pypi/label-studio-sdk",
"product": "label-studio-sdk",
"repo": "https://github.com/HumanSignal/label-studio-sdk",
"vendor": "HumanSignal",
"versions": [
{
"lessThan": "2.1.2",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:humansignal:label_studio:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.23.2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Michael Holmquist, HASP Labs"
}
],
"datePublic": "2026-09-29T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Label Studio before 1.23.2 (label-studio-sdk before 2.1.2) contains a server-side request forgery vulnerability that allows authenticated users to read internal URLs through image-bearing export formats. Attackers can import tasks with data.image pointing at internal services, export as YOLO or COCO with images to read responses, and spoof Host to capture the organization owner\u0027s API token."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-918",
"description": "Server-Side Request Forgery (SSRF)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-03T15:17:17.112Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"name": "GitHub Security Advisory (GHSA-6437-7wc6-gmx5)",
"tags": [
"vendor-advisory"
],
"url": "https://github.com/HumanSignal/label-studio/security/advisories/GHSA-6437-7wc6-gmx5"
},
{
"name": "label-studio fix commit",
"tags": [
"patch"
],
"url": "https://github.com/HumanSignal/label-studio/commit/df96d79183156e556d91825d15fa7721f1145e1a"
},
{
"name": "label-studio-sdk fix commit",
"tags": [
"patch"
],
"url": "https://github.com/HumanSignal/label-studio-sdk/commit/c20c899aaaa302740dacd46a47e5774bb677561f"
},
{
"tags": [
"technical-description"
],
"url": "https://github.com/HumanSignal/label-studio/blob/1.23.1/label_studio/data_export/models.py#L160-L167"
},
{
"tags": [
"technical-description"
],
"url": "https://github.com/HumanSignal/label-studio-sdk/blob/2.1.1/src/label_studio_sdk/_extensions/label_studio_tools/core/utils/io.py#L62-L71"
},
{
"tags": [
"technical-description"
],
"url": "https://github.com/HumanSignal/label-studio-sdk/blob/2.1.1/src/label_studio_sdk/_extensions/label_studio_tools/core/utils/io.py#L299-L338"
},
{
"name": "VulnCheck Advisory: Label Studio before 1.23.2 SSRF and Token Disclosure via Image Export Downloads",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/label-studio-before-1.23.2-ssrf-and-token-disclosure-via-image-export-downloads"
}
],
"title": "Label Studio before 1.23.2 SSRF and Token Disclosure via Image Export Downloads",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-121561",
"datePublished": "2026-11-03T15:17:17.112Z",
"dateReserved": "2026-11-03T14:46:18.296Z",
"dateUpdated": "2026-11-07T03:12:10.171Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}