CVE-2026-121561
7.7 HIGHpublic exploit availablePublished 2026-11-03 · Updated 2026-11-03
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Label Studio before 1.23.2 (label-studio-sdk before 2.1.2) contains a server-side request forgery vulnerability that allows authenticated users to read internal URLs through image-bearing export formats. Attackers can import tasks with data.image pointing at internal services, export as YOLO or COCO with images to read responses, and spoof Host to capture the organization owner's API token.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Weaknesses
CWE-918
Public exploit & PoC references
- https://github.com/HumanSignal/label-studio-sdk/blob/2.1.1/src/label_studio_sdk/_extensions/label_studio_tools/core/utils/io.py#L299-L338
- https://github.com/HumanSignal/label-studio-sdk/blob/2.1.1/src/label_studio_sdk/_extensions/label_studio_tools/core/utils/io.py#L62-L71
- https://github.com/HumanSignal/label-studio-sdk/commit/c20c899aaaa302740dacd46a47e5774bb677561f
- https://github.com/HumanSignal/label-studio/blob/1.23.1/label_studio/data_export/models.py#L160-L167
- https://github.com/HumanSignal/label-studio/commit/df96d79183156e556d91825d15fa7721f1145e1a
- https://github.com/HumanSignal/label-studio/security/advisories/GHSA-6437-7wc6-gmx5
All references
- https://github.com/HumanSignal/label-studio-sdk/blob/2.1.1/src/label_studio_sdk/_extensions/label_studio_tools/core/utils/io.py#L299-L338
- https://github.com/HumanSignal/label-studio-sdk/blob/2.1.1/src/label_studio_sdk/_extensions/label_studio_tools/core/utils/io.py#L62-L71
- https://github.com/HumanSignal/label-studio-sdk/commit/c20c899aaaa302740dacd46a47e5774bb677561f
- https://github.com/HumanSignal/label-studio/blob/1.23.1/label_studio/data_export/models.py#L160-L167
- https://github.com/HumanSignal/label-studio/commit/df96d79183156e556d91825d15fa7721f1145e1a
- https://github.com/HumanSignal/label-studio/security/advisories/GHSA-6437-7wc6-gmx5
- https://www.vulncheck.com/advisories/label-studio-before-1.23.2-ssrf-and-token-disclosure-via-image-export-downloads
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2020-37278PoC
- HIGHCVE-2023-54402PoC
- MEDIUMCVE-2024-34319
- HIGHCVE-2025-14260
- UNSCOREDCVE-2026-0311
- LOWCVE-2026-100104
- MEDIUMCVE-2026-100251
- MEDIUMCVE-2026-100257
Related by shared AI tags and CWE weakness class. Browse the full archive.