Product
high
advisory
Authorization Bypass in Label Studio Storage URI Resolution
1 TTP 1 CVELabel Studio contains an authorization bypass vulnerability in its proxy_api.py module that allows attackers to access and exfiltrate cloud storage objects belonging to other organizations.
Label Studio
vulnerability
authorization-bypass
cloud
data-exfiltration
1t
1c
high
advisory
IDOR Vulnerability in Label Studio Annotation API
2 TTPs 1 CVELabel Studio contains an insecure direct object reference (IDOR) vulnerability, CVE-2026-76073, allowing authenticated users to read, modify, or delete annotations across organizational boundaries by enumerating sequential identifiers.
Label Studio
idor
api-security
data-exfiltration
2t
1c