Label-Studio-Sdk (< 2.1.2) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/label-studio-sdk--2.1.2/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 03 Nov 2026 18:01:27 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgLabel Studio: Server-side request forgery (CVE-2026-121561)https://feed.craftedsignal.io/briefs/2026-11-label-studio-ssrf/Tue, 03 Nov 2026 18:01:27 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-label-studio-ssrf/Label Studio versions prior to 1.23.2 and label-studio-sdk prior to 2.1.2 are vulnerable to SSRF, allowing authenticated users to access internal resources and capture sensitive API tokens.CVE-2026-121561 affects Label Studio (< 1.23.2) and label-studio-sdk (< 2.1.2). The vulnerability allows an authenticated attacker to perform server-side request forgery (SSRF). By importing tasks with a crafted 'data.image' field, an attacker can coerce the Label Studio server into making unauthorized requests to internal network services. Exporting these tasks via YOLO or COCO formats allows the attacker to retrieve internal service responses, potentially leading to the theft of organization owner API tokens through Host header manipulation.

Attack Chain

  1. Attacker authenticates to the Label Studio platform.
  2. Attacker submits a task containing a 'data.image' URL pointing to a targeted internal service.
  3. Label Studio server processes the image metadata from the task.
  4. Attacker initiates an export request using the YOLO or COCO format.
  5. The server performs an SSRF request to the internal URL provided in the task metadata.
  6. Attacker retrieves the exported file, which includes the response body from the internal service or captured API tokens.

Recommendation

  • Upgrade Label Studio to version 1.23.2 or later immediately.
  • Upgrade label-studio-sdk to version 2.1.2 or later.
  • Audit outbound network egress from Label Studio servers to limit access to sensitive internal infrastructure.
]]>highadvisoryssrfweb-vulnerability