EUVD-2026-70489
GHSA-jhvx-775r-cm5m
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable with low-privilege auth required; scope changes to other tenants' cloud storage; confidentiality-only impact, no integrity or availability effect.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
3DescriptionCVE.org
Label Studio fails to apply organization filters when resolving storage URIs for tasks and projects in proxy_api.py endpoints. Attackers can access other tenants' cloud storage objects by creating a separate organization and supplying arbitrary file URIs to presign or stream bucket contents.
AnalysisAI
Cross-tenant cloud storage object access in Label Studio through 1.23.0 allows an authenticated low-privilege user to read other organizations' cloud storage contents by supplying arbitrary file URIs to the proxy_api.py presign and stream endpoints. The root cause is the absence of organization-scoped filters during URI resolution, enabling a tenant in a shared deployment to enumerate and exfiltrate training data, annotations, or source media belonging to other organizations. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid Label Studio account with at least the ability to create or belong to an organization (PR:L). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 8.3 with vector AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/SC:H reflects the real risk accurately: the attack is entirely network-reachable, requires only low-privilege access (any registered user), involves no user interaction, and causes high confidentiality impact both within the attacker's tenant context and across the subsequent-system boundary into other tenants' cloud storage. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No explicitly confirmed patched release version is identified in the available intelligence - the VulnCheck advisory and GitHub references document the vulnerability through 1.23.0 but do not name a fixed release. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: audit your Label Studio deployment to confirm whether version 1.23.0 or earlier is in use and whether it hosts multiple distinct organizations on shared infrastructure with cloud storage integration enabled. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Label Studio
View allLabel Studio is an open source data labeling tool. Rated medium severity (CVSS 6.1), this vulnerability is remotely expl
Label Studio is a multi-type data labeling and annotation tool with standardized output format. Rated high severity (CVS
Label Studio is an open source data labeling tool. Rated high severity (CVSS 8.6), this vulnerability is remotely exploi
Label Studio is a multi-type data labeling and annotation tool. Rated high severity (CVSS 7.6), this vulnerability is re
A Server Side Request Forgery (SSRF) in the Data Import module in Heartex - Label Studio Community Edition versions 1.5.
Label Studio is an open source data labeling tool. Rated high severity (CVSS 7.5), this vulnerability is remotely exploi
### Summary On all Label Studio versions prior to 1.11.0, data imported via file upload feature is not properly sanitize
Stored XSS in Label Studio's custom_hotkeys feature allows authenticated attackers to inject malicious JavaScript that e
Cross-organization IDOR in Label Studio allows any authenticated user on a shared instance to read, modify, and delete a
Server-side request forgery in Label Studio through 1.23.0 allows authenticated users to route outbound webhook requests
Server-side request forgery in HumanSignal Label Studio through 1.24.0.dev0 allows authenticated users to direct the ser
Label Studio, an open source data labeling tool had a remote import feature allowed users to import data from a remote w
Share
External POC / Exploit Code
Leaving vuln.today