Live › vulnerability › CVE-2026-121561
Label Studio, a data labeling tool used to prepare training data for AI models, has a server-side request forgery flaw in its image-bearing export formats. An authenticated user can make the server fetch internal URLs and read the responses, and can spoof the Host header to capture the organization owner's API token.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 16:21 UTC. All times on this page are UTC.
Teams running a self-hosted Label Studio instance where users have accounts and can import tasks and export image data. The risk depends on whether the server can reach internal services that a user should not see. Instances used only by a single trusted person or with no internal network reach are less exposed, but the sources do not quantify this further.
No product ranges from the sources yet.
label-studio --version or the version shown in the web interface.pip show label-studio-sdk.1.23.2 or later.2.1.2 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Label Studio before 1.23.2 (label-studio-sdk before 2.1.2) contains a server-side request forgery vulnerability that allows authenticated users to read internal URLs through image-bearing export formats. Attackers can import tasks with data.image pointing at internal services, export as YOLO or COCO with images to read responses, and spoof Host to capture the organization owner's API token.
This page as .md · .json · in your agent: get_signal("CVE-2026-121561")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.