CVE-2026-121561

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-121561", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "PUBLISHED", "assignerShortName": "VulnCheck", "dateReserved": "2026-11-03T14:46:18.296Z", "datePublished": "2026-11-03T15:17:17.112Z", "dateUpdated": "2026-11-07T03:12:10.171Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-11-03T15:17:17.112Z"}, "datePublic": "2026-09-29T00:00:00.000Z", "title": "Label Studio before 1.23.2 SSRF and Token Disclosure via Image Export Downloads", "descriptions": [{"lang": "en", "value": "Label Studio before 1.23.2 (label-studio-sdk before 2.1.2) contains a server-side request forgery vulnerability that allows authenticated users to read internal URLs through image-bearing export formats. Attackers can import tasks with data.image pointing at internal services, export as YOLO or COCO with images to read responses, and spoof Host to capture the organization owner's API token."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Server-Side Request Forgery (SSRF)", "cweId": "CWE-918", "type": "CWE"}]}], "affected": [{"vendor": "HumanSignal", "product": "label-studio", "defaultStatus": "unaffected", "versions": [{"version": "0", "lessThan": "1.23.2", "versionType": "semver", "status": "affected"}], "packageURL": "pkg:pypi/label-studio", "repo": "https://github.com/HumanSignal/label-studio"}, {"vendor": "HumanSignal", "product": "label-studio-sdk", "defaultStatus": "unaffected", "packageURL": "pkg:pypi/label-studio-sdk", "repo": "https://github.com/HumanSignal/label-studio-sdk", "versions": [{"version": "0", "lessThan": "2.1.2", "versionType": "semver", "status": "affected"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:humansignal:label_studio:*:*:*:*:*:*:*:*", "versionEndExcluding": "1.23.2"}]}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N", "attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "userInteraction": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "baseScore": 6.3, "baseSeverity": "MEDIUM"}}, {"format": "CVSS", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseScore": 7.7, "baseSeverity": "HIGH"}}], "references": [{"url": "https://github.com/HumanSignal/label-studio/security/advisories/GHSA-6437-7wc6-gmx5", "tags": ["vendor-advisory"], "name": "GitHub Security Advisory (GHSA-6437-7wc6-gmx5)"}, {"url": "https://github.com/HumanSignal/label-studio/commit/df96d79183156e556d91825d15fa7721f1145e1a", "tags": ["patch"], "name": "label-studio fix commit"}, {"url": "https://github.com/HumanSignal/label-studio-sdk/commit/c20c899aaaa302740dacd46a47e5774bb677561f", "tags": ["patch"], "name": "label-studio-sdk fix commit"}, {"url": "https://github.com/HumanSignal/label-studio/blob/1.23.1/label_studio/data_export/models.py#L160-L167", "tags": ["technical-description"]}, {"url": "https://github.com/HumanSignal/label-studio-sdk/blob/2.1.1/src/label_studio_sdk/_extensions/label_studio_tools/core/utils/io.py#L62-L71", "tags": ["technical-description"]}, {"url": "https://github.com/HumanSignal/label-studio-sdk/blob/2.1.1/src/label_studio_sdk/_extensions/label_studio_tools/core/utils/io.py#L299-L338", "tags": ["technical-description"]}, {"name": "VulnCheck Advisory: Label Studio before 1.23.2 SSRF and Token Disclosure via Image Export Downloads", "tags": ["third-party-advisory"], "url": "https://www.vulncheck.com/advisories/label-studio-before-1.23.2-ssrf-and-token-disclosure-via-image-export-downloads"}], "credits": [{"lang": "en", "value": "Michael Holmquist, HASP Labs", "type": "finder"}], "x_generator": {"engine": "vulncheck-endgame"}}, "adp": [{"references": [{"url": "https://github.com/HumanSignal/label-studio/security/advisories/GHSA-6437-7wc6-gmx5", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-07T03:11:49.232134Z", "id": "CVE-2026-121561", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-07T03:12:10.171Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-121561", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-07T03:11:49.232134Z"}}}], "references": [{"url": "https://github.com/HumanSignal/label-studio/security/advisories/GHSA-6437-7wc6-gmx5", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-07T03:12:05.136Z"}}], "cna": {"title": "Label Studio before 1.23.2 SSRF and Token Disclosure via Image Export Downloads", "credits": [{"lang": "en", "type": "finder", "value": "Michael Holmquist, HASP Labs"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"version": "4.0", "baseScore": 6.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "LOW"}}, {"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.7, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"repo": "https://github.com/HumanSignal/label-studio", "vendor": "HumanSignal", "product": "label-studio", "versions": [{"status": "affected", "version": "0", "lessThan": "1.23.2", "versionType": "semver"}], "packageURL": "pkg:pypi/label-studio", "defaultStatus": "unaffected"}, {"repo": "https://github.com/HumanSignal/label-studio-sdk", "vendor": "HumanSignal", "product": "label-studio-sdk", "versions": [{"status": "affected", "version": "0", "lessThan": "2.1.2", "versionType": "semver"}], "packageURL": "pkg:pypi/label-studio-sdk", "defaultStatus": "unaffected"}], "datePublic": "2026-09-29T00:00:00.000Z", "references": [{"url": "https://github.com/HumanSignal/label-studio/security/advisories/GHSA-6437-7wc6-gmx5", "name": "GitHub Security Advisory (GHSA-6437-7wc6-gmx5)", "tags": ["vendor-advisory"]}, {"url": "https://github.com/HumanSignal/label-studio/commit/df96d79183156e556d91825d15fa7721f1145e1a", "name": "label-studio fix commit", "tags": ["patch"]}, {"url": "https://github.com/HumanSignal/label-studio-sdk/commit/c20c899aaaa302740dacd46a47e5774bb677561f", "name": "label-studio-sdk fix commit", "tags": ["patch"]}, {"url": "https://github.com/HumanSignal/label-studio/blob/1.23.1/label_studio/data_export/models.py#L160-L167", "tags": ["technical-description"]}, {"url": "https://github.com/HumanSignal/label-studio-sdk/blob/2.1.1/src/label_studio_sdk/_extensions/label_studio_tools/core/utils/io.py#L62-L71", "tags": ["technical-description"]}, {"url": "https://github.com/HumanSignal/label-studio-sdk/blob/2.1.1/src/label_studio_sdk/_extensions/label_studio_tools/core/utils/io.py#L299-L338", "tags": ["technical-description"]}, {"url": "https://www.vulncheck.com/advisories/label-studio-before-1.23.2-ssrf-and-token-disclosure-via-image-export-downloads", "name": "VulnCheck Advisory: Label Studio before 1.23.2 SSRF and Token Disclosure via Image Export Downloads", "tags": ["third-party-advisory"]}], "x_generator": {"engine": "vulncheck-endgame"}, "descriptions": [{"lang": "en", "value": "Label Studio before 1.23.2 (label-studio-sdk before 2.1.2) contains a server-side request forgery vulnerability that allows authenticated users to read internal URLs through image-bearing export formats. Attackers can import tasks with data.image pointing at internal services, export as YOLO or COCO with images to read responses, and spoof Host to capture the organization owner's API token."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-918", "description": "Server-Side Request Forgery (SSRF)"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:humansignal:label_studio:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "1.23.2"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-11-03T15:17:17.112Z"}}}, "cveMetadata": {"cveId": "CVE-2026-121561", "state": "PUBLISHED", "dateUpdated": "2026-11-07T03:12:10.171Z", "dateReserved": "2026-11-03T14:46:18.296Z", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "datePublished": "2026-11-03T15:17:17.112Z", "assignerShortName": "VulnCheck"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "packageURL": "pkg:pypi/label-studio", "product": "label-studio", "repo": "https://github.com/HumanSignal/label-studio", "vendor": "HumanSignal", "versions": [{"lessThan": "1.23.2", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "packageURL": "pkg:pypi/label-studio-sdk", "product": "label-studio-sdk", "repo": "https://github.com/HumanSignal/label-studio-sdk", "vendor": "HumanSignal", "versions": [{"lessThan": "2.1.2", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "disclosure@vulncheck.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Label Studio before 1.23.2 (label-studio-sdk before 2.1.2) contains a server-side request forgery vulnerability that allows authenticated users to read internal URLs through image-bearing export formats. Attackers can import tasks with data.image pointing at internal services, export as YOLO or COCO with images to read responses, and spoof Host to capture the organization owner's API token."}, {"lang": "es", "value": "Label Studio anterior a la versi\u00f3n 1.23.2 (label-studio-sdk anterior a la versi\u00f3n 2.1.2) contiene una vulnerabilidad de falsificaci\u00f3n de petici\u00f3n del lado del servidor (SSRF) que permite a usuarios autenticados leer URL internas a trav\u00e9s de formatos de exportaci\u00f3n que contienen im\u00e1genes. Los atacantes pueden importar tareas con data.image apuntando a servicios internos, exportar como YOLO o COCO con im\u00e1genes para leer las respuestas y suplantar Host para capturar el token de la API del propietario de la organizaci\u00f3n."}], "id": "CVE-2026-121561", "lastModified": "2026-11-11T20:10:00.273", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.7, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.1, "impactScore": 4.0, "source": "disclosure@vulncheck.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "disclosure@vulncheck.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-121561", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-07T03:11:49.232134Z", "version": "2.0.3"}}]}, "published": "2026-11-03T16:17:28.940", "references": [{"source": "disclosure@vulncheck.com", "url": "https://github.com/HumanSignal/label-studio-sdk/blob/2.1.1/src/label_studio_sdk/_extensions/label_studio_tools/core/utils/io.py#L299-L338"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/HumanSignal/label-studio-sdk/blob/2.1.1/src/label_studio_sdk/_extensions/label_studio_tools/core/utils/io.py#L62-L71"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/HumanSignal/label-studio-sdk/commit/c20c899aaaa302740dacd46a47e5774bb677561f"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/HumanSignal/label-studio/blob/1.23.1/label_studio/data_export/models.py#L160-L167"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/HumanSignal/label-studio/commit/df96d79183156e556d91825d15fa7721f1145e1a"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/HumanSignal/label-studio/security/advisories/GHSA-6437-7wc6-gmx5"}, {"source": "disclosure@vulncheck.com", "url": "https://www.vulncheck.com/advisories/label-studio-before-1.23.2-ssrf-and-token-disclosure-via-image-export-downloads"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://github.com/HumanSignal/label-studio/security/advisories/GHSA-6437-7wc6-gmx5"}], "sourceIdentifier": "disclosure@vulncheck.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-918"}], "source": "disclosure@vulncheck.com", "type": "Secondary"}]}

{}

{}