CVE-2026-85211: Label Studio through 1.23.0 Cross-Organization Storage URI Resolution

Severity: high (CVSS 7.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-03 · updated 2026-09-10
Weakness: CWE-639

Description

Label Studio fails to apply organization filters when resolving storage URIs for tasks and projects in proxy_api.py endpoints. Attackers can access other tenants' cloud storage objects by creating a separate organization and supplying arbitrary file URIs to presign or stream bucket contents.

Affected products

HumanSignal label-studio: through 1.23.0

References

https://github.com/HumanSignal/label-studio
https://github.com/HumanSignal/label-studio/blob/1.23.0/label_studio/io_storages/proxy_api.py
https://github.com/HumanSignal/label-studio/issues/9924
https://www.vulncheck.com/advisories/label-studio-through-1.23.0-cross-organization-storage-uri-resolution
https://github.com/HumanSignal/label-studio/issues/9924

Get alerted when CVE-2026-85211 or the next vulnerability affects your stack