MEDIUM 6.3 NVD
CVE-2026-121561
Label Studio before 1.23.2 (label-studio-sdk before 2.1.2) contains a server-side request forgery vulnerability that allows authenticated users to read internal
Label Studio before 1.23.2 (label-studio-sdk before 2.1.2) contains a server-side request forgery vulnerability that allows authenticated users to read internal URLs through image-bearing export formats. Attackers can import tasks with data.image pointing at internal services, export as YOLO or COCO with images to read responses, and spoof Host to capture the organization owner's API token.
References
- https://github.com/HumanSignal/label-studio-sdk/blob/2.1.1/src/label_studio_sdk/_extension
- https://github.com/HumanSignal/label-studio-sdk/blob/2.1.1/src/label_studio_sdk/_extension
- https://github.com/HumanSignal/label-studio-sdk/commit/c20c899aaaa302740dacd46a47e5774bb67
- https://github.com/HumanSignal/label-studio/blob/1.23.1/label_studio/data_export/models.py
- https://github.com/HumanSignal/label-studio/commit/df96d79183156e556d91825d15fa7721f1145e1
This medium severity vulnerability with a CVSS score of 6.3 was published on 2026-11-03 via NVD.
vulnfeed aggregates 18261 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.