Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for label-studio-sdk by HumanSignal

    CVE-2026-121561 (GCVE-0-2026-121561)

    Vulnerability from nvd – Published: 2026-11-03 15:17 – Updated: 2026-11-03 15:17
    VLAI
    Title
    Label Studio before 1.23.2 SSRF and Token Disclosure via Image Export Downloads
    Summary
    Label Studio before 1.23.2 (label-studio-sdk before 2.1.2) contains a server-side request forgery vulnerability that allows authenticated users to read internal URLs through image-bearing export formats. Attackers can import tasks with data.image pointing at internal services, export as YOLO or COCO with images to read responses, and spoof Host to capture the organization owner's API token.
    Severity
    6.3 (Medium)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N
    7.7 (High)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
    CWE
    • CWE-918 - Server-Side Request Forgery (SSRF)
    Assigner
    VulnCheck CNA under the mitre root
    CNA scorecard B 84/100 over 7416 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    HumanSignal label-studio Affected: 0 , < 1.23.2 (semver)
    		Create a notification for this product.
    HumanSignal label-studio-sdk Affected: 0 , < 2.1.2 (semver)
    		Create a notification for this product.
    Date Public
    2026-09-29 00:00
    Credits
    Michael Holmquist, HASP Labs
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:pypi/label-studio",
          "product": "label-studio",
          "repo": "https://github.com/HumanSignal/label-studio",
          "vendor": "HumanSignal",
          "versions": [
            {
              "lessThan": "1.23.2",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:pypi/label-studio-sdk",
          "product": "label-studio-sdk",
          "repo": "https://github.com/HumanSignal/label-studio-sdk",
          "vendor": "HumanSignal",
          "versions": [
            {
              "lessThan": "2.1.2",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:humansignal:label_studio:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "1.23.2",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Michael Holmquist, HASP Labs"
        }
      ],
      "datePublic": "2026-09-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Label Studio before 1.23.2 (label-studio-sdk before 2.1.2) contains a server-side request forgery vulnerability that allows authenticated users to read internal URLs through image-bearing export formats. Attackers can import tasks with data.image pointing at internal services, export as YOLO or COCO with images to read responses, and spoof Host to capture the organization owner\u0027s API token."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "NONE"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "Server-Side Request Forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-03T15:17:17.112Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "GitHub Security Advisory (GHSA-6437-7wc6-gmx5)",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/HumanSignal/label-studio/security/advisories/GHSA-6437-7wc6-gmx5"
        },
        {
          "name": "label-studio fix commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/HumanSignal/label-studio/commit/df96d79183156e556d91825d15fa7721f1145e1a"
        },
        {
          "name": "label-studio-sdk fix commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/HumanSignal/label-studio-sdk/commit/c20c899aaaa302740dacd46a47e5774bb677561f"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/HumanSignal/label-studio/blob/1.23.1/label_studio/data_export/models.py#L160-L167"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/HumanSignal/label-studio-sdk/blob/2.1.1/src/label_studio_sdk/_extensions/label_studio_tools/core/utils/io.py#L62-L71"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/HumanSignal/label-studio-sdk/blob/2.1.1/src/label_studio_sdk/_extensions/label_studio_tools/core/utils/io.py#L299-L338"
        },
        {
          "name": "VulnCheck Advisory: Label Studio before 1.23.2 SSRF and Token Disclosure via Image Export Downloads",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/label-studio-before-1.23.2-ssrf-and-token-disclosure-via-image-export-downloads"
        }
      ],
      "title": "Label Studio before 1.23.2 SSRF and Token Disclosure via Image Export Downloads",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-121561",
    "datePublished": "2026-11-03T15:17:17.112Z",
    "dateReserved": "2026-11-03T14:46:18.296Z",
    "dateUpdated": "2026-11-03T15:17:17.112Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-121561 (GCVE-0-2026-121561)

    Vulnerability from cvelistv5 – Published: 2026-11-03 15:17 – Updated: 2026-11-03 15:17
    VLAI
    Title
    Label Studio before 1.23.2 SSRF and Token Disclosure via Image Export Downloads
    Summary
    Label Studio before 1.23.2 (label-studio-sdk before 2.1.2) contains a server-side request forgery vulnerability that allows authenticated users to read internal URLs through image-bearing export formats. Attackers can import tasks with data.image pointing at internal services, export as YOLO or COCO with images to read responses, and spoof Host to capture the organization owner's API token.
    Severity
    6.3 (Medium)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N
    7.7 (High)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
    CWE
    • CWE-918 - Server-Side Request Forgery (SSRF)
    Assigner
    VulnCheck CNA under the mitre root
    CNA scorecard B 84/100 over 7416 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    HumanSignal label-studio Affected: 0 , < 1.23.2 (semver)
    		Create a notification for this product.
    HumanSignal label-studio-sdk Affected: 0 , < 2.1.2 (semver)
    		Create a notification for this product.
    Date Public
    2026-09-29 00:00
    Credits
    Michael Holmquist, HASP Labs
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:pypi/label-studio",
          "product": "label-studio",
          "repo": "https://github.com/HumanSignal/label-studio",
          "vendor": "HumanSignal",
          "versions": [
            {
              "lessThan": "1.23.2",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:pypi/label-studio-sdk",
          "product": "label-studio-sdk",
          "repo": "https://github.com/HumanSignal/label-studio-sdk",
          "vendor": "HumanSignal",
          "versions": [
            {
              "lessThan": "2.1.2",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:humansignal:label_studio:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "1.23.2",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Michael Holmquist, HASP Labs"
        }
      ],
      "datePublic": "2026-09-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Label Studio before 1.23.2 (label-studio-sdk before 2.1.2) contains a server-side request forgery vulnerability that allows authenticated users to read internal URLs through image-bearing export formats. Attackers can import tasks with data.image pointing at internal services, export as YOLO or COCO with images to read responses, and spoof Host to capture the organization owner\u0027s API token."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "NONE"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "Server-Side Request Forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-03T15:17:17.112Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "GitHub Security Advisory (GHSA-6437-7wc6-gmx5)",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/HumanSignal/label-studio/security/advisories/GHSA-6437-7wc6-gmx5"
        },
        {
          "name": "label-studio fix commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/HumanSignal/label-studio/commit/df96d79183156e556d91825d15fa7721f1145e1a"
        },
        {
          "name": "label-studio-sdk fix commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/HumanSignal/label-studio-sdk/commit/c20c899aaaa302740dacd46a47e5774bb677561f"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/HumanSignal/label-studio/blob/1.23.1/label_studio/data_export/models.py#L160-L167"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/HumanSignal/label-studio-sdk/blob/2.1.1/src/label_studio_sdk/_extensions/label_studio_tools/core/utils/io.py#L62-L71"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/HumanSignal/label-studio-sdk/blob/2.1.1/src/label_studio_sdk/_extensions/label_studio_tools/core/utils/io.py#L299-L338"
        },
        {
          "name": "VulnCheck Advisory: Label Studio before 1.23.2 SSRF and Token Disclosure via Image Export Downloads",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/label-studio-before-1.23.2-ssrf-and-token-disclosure-via-image-export-downloads"
        }
      ],
      "title": "Label Studio before 1.23.2 SSRF and Token Disclosure via Image Export Downloads",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-121561",
    "datePublished": "2026-11-03T15:17:17.112Z",
    "dateReserved": "2026-11-03T14:46:18.296Z",
    "dateUpdated": "2026-11-03T15:17:17.112Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}