{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/label-studio--1.23.2/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7.7,"id":"CVE-2026-121561"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Label Studio (\u003c 1.23.2)","label-studio-sdk (\u003c 2.1.2)"],"_cs_severities":["high"],"_cs_tags":["ssrf","web-vulnerability"],"_cs_type":"advisory","_cs_vendors":["Label Studio"],"content_html":"\u003cp\u003eCVE-2026-121561 affects Label Studio (\u0026lt; 1.23.2) and label-studio-sdk (\u0026lt; 2.1.2). The vulnerability allows an authenticated attacker to perform server-side request forgery (SSRF). By importing tasks with a crafted 'data.image' field, an attacker can coerce the Label Studio server into making unauthorized requests to internal network services. Exporting these tasks via YOLO or COCO formats allows the attacker to retrieve internal service responses, potentially leading to the theft of organization owner API tokens through Host header manipulation.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eAttacker authenticates to the Label Studio platform.\u003c/li\u003e\n\u003cli\u003eAttacker submits a task containing a 'data.image' URL pointing to a targeted internal service.\u003c/li\u003e\n\u003cli\u003eLabel Studio server processes the image metadata from the task.\u003c/li\u003e\n\u003cli\u003eAttacker initiates an export request using the YOLO or COCO format.\u003c/li\u003e\n\u003cli\u003eThe server performs an SSRF request to the internal URL provided in the task metadata.\u003c/li\u003e\n\u003cli\u003eAttacker retrieves the exported file, which includes the response body from the internal service or captured API tokens.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Label Studio to version 1.23.2 or later immediately.\u003c/li\u003e\n\u003cli\u003eUpgrade label-studio-sdk to version 2.1.2 or later.\u003c/li\u003e\n\u003cli\u003eAudit outbound network egress from Label Studio servers to limit access to sensitive internal infrastructure.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-03T18:01:27Z","date_published":"2026-11-03T18:01:27Z","id":"https://feed.craftedsignal.io/briefs/2026-11-label-studio-ssrf/","summary":"Label Studio versions prior to 1.23.2 and label-studio-sdk prior to 2.1.2 are vulnerable to SSRF, allowing authenticated users to access internal resources and capture sensitive API tokens.","title":"Label Studio: Server-side request forgery (CVE-2026-121561)","url":"https://feed.craftedsignal.io/briefs/2026-11-label-studio-ssrf/"}],"language":"en","title":"CraftedSignal Threat Feed - Label Studio (\u003c 1.23.2)","version":"https://jsonfeed.org/version/1.1"}