Description
Label Studio fails to apply organization filters when resolving storage URIs for tasks and projects in proxy_api.py endpoints. Attackers can access other tenants' cloud storage objects by creating a separate organization and supplying arbitrary file URIs to presign or stream bucket contents.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HumanSignal | label-studio | ≤ 1.23.0 | — |
References
- GitHub Issue #9924 issue-tracking
- https://github.com/HumanSignal/label-studio product
- io_storages/proxy_api.py at 1.23.0 technical-description
- VulnCheck Advisory: Label Studio through 1.23.0 Cross-Organization Storage URI Resolution third-party-advisory