Skip to content
OpenAdvisories

Product · HumanSignal

label-studio-sdk

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2026-121561

    Label Studio before 1.23.2 SSRF and Token Disclosure via Image Export Downloads

    Label Studio before 1.23.2 (label-studio-sdk before 2.1.2) contains a server-side request forgery vulnerability that allows authenticated users to read internal URLs through image-bearing export formats. Attackers can import tasks with data.image pointing at …

    HumanSignal label-studio label-studio-sdk