Label Studio < 1.16.0 - Cross-Site Scripting

Label Studio prior to version 1.16.0 contains a cross-site scripting caused by rendering unsanitized user-provided HTML in the /projects/upload-example endpoint, letting attackers execute arbitrary JavaScript via crafted labelconfig in a GET request, exploit requires victims to visit malicious UR...

Label Studio - Sensitive Information Exposure

An attacker can construct a filter chain to filter tasks based on sensitive fields for all user accounts on the platform by exploiting Django's Object Relational Mapper ORM. Since the results of query can be manipulated by the ORM filter, an attacker can leak these sensitive fields character by...

Label Studio - Cross-Site Scripting

Versions prior to 1.9.2 have a cross-site scripting XSS vulnerability that could be exploited when an authenticated user uploads a crafted image file for their avatar that gets rendered as a HTML file on the website. id: CVE-2023-47115 info: name: Label Studio - Cross-Site Scripting author: isaca...

PYSEC-2026-1505 HumanSignal label-studio-ml-backend Deserialization of Untrusted Data vulnerability

A vulnerability has been found in HumanSignal label-studio-ml-backend up to 9fb7f4aa186612806af2becfb621f6ed8d9fdbaf and classified as problematic. Affected by this vulnerability is the function load of the file label-studio-ml-backend/labelstudioml/examples/yolo/utils/neuralnets.py of the...

PYSEC-2026-1506 Label Studio has a Path Traversal Vulnerability via image Field

Description A path traversal vulnerability in Label Studio SDK versions prior to 1.0.10 allows unauthorized file access outside the intended directory structure. Label Studio versions before 1.16.0 specified SDK versions prior to 1.0.10 as dependencies, and the issue was confirmed in Label Studio...

PYSEC-2026-1503 Label Studio allows Server-Side Request Forgery in the S3 Storage Endpoint

Description Label Studio's S3 storage integration feature contains a Server-Side Request Forgery SSRF vulnerability in its endpoint configuration. When creating an S3 storage connection, the application allows users to specify a custom S3 endpoint URL via the s3endpoint parameter. This endpoint U...

Label Studio < 1.18.0 - Reflected XSS

Label Studio 1.18.0 contains a stored XSS caused by improper sanitization in POST /projects/upload-example/ endpoint, letting attackers inject malicious scripts to hijack sessions and perform unauthorized actions, exploit requires sending crafted requests. id: CVE-2025-47783 info: name: Label...

GHSA-C38F-WX89-P2XG vulnerabilities

Vulnerabilities for packages: label-studio...

CVE-2026-44660 vulnerabilities

Vulnerabilities for packages: label-studio...

GHSA-3936-CMFR-PM3M vulnerabilities

Vulnerabilities for packages: label-studio, nemo, open-webui, kserve...

GHSA-752W-5FWX-JX9F vulnerabilities

Vulnerabilities for packages: az, metaflow-service-fips, dbt-snowflake, datadog-agent-fips, awx, keep-fips, superset, airflow-core, label-studio, pgadmin4-fips, ggshield, authentik, vllm-openai-cuda-12.9, authentik-fips, py3-cassandra-medusa, open-webui, litellm, keep, opal, request-1276, kserve,...

CVE-2026-32274 vulnerabilities

Vulnerabilities for packages: label-studio, nemo, open-webui, kserve...

CVE-2026-32597 vulnerabilities

Vulnerabilities for packages: az, metaflow-service-fips, dbt-snowflake, datadog-agent-fips, awx, keep-fips, superset, airflow-core, label-studio, pgadmin4-fips, ggshield, authentik, vllm-openai-cuda-12.9, authentik-fips, py3-cassandra-medusa, open-webui, litellm, keep, opal, request-1276, kserve,...

GHSA-XVP8-3MHV-424C vulnerabilities

Vulnerabilities for packages: label-studio...

CVE-2026-28350 vulnerabilities

Vulnerabilities for packages: label-studio...

GHSA-HW26-MMPG-FQFG vulnerabilities

Vulnerabilities for packages: label-studio...

CVE-2026-28348 vulnerabilities

Vulnerabilities for packages: label-studio...

CVE-2026-22033 vulnerabilities

Vulnerabilities for packages: label-studio...

GHSA-2MQ9-HM29-8QCH vulnerabilities

Vulnerabilities for packages: label-studio...

Stored Cross-Site Scripting (XSS)

labelstudio is vulnerable to stored cross-site scripting XSS.The vulnerability is due to insufficient sanitization of user-controlled input in the customhotkeys functionality, which allows an authenticated attacker or one who tricks a user/admin to inject malicious JavaScript that executes in oth...