Vulnerability · Published Sep 3, 2026 · Assigned by VulnCheck
CVE-2026-85211Label Studio through 1.23.0 Cross-Organization Storage URI Resolution
High 7.7
In plain English
A high-severity authorization bypass via user-controlled key in label-studio from HumanSignal. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 36% of all known vulnerabilities).
Severity (CVSS 3.1)7.7High
Exploit odds (30 days)0.4%top 64.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Label Studio fails to apply organization filters when resolving storage URIs for tasks and projects in proxy_api.py endpoints. Attackers can access other tenants' cloud storage objects by creating a separate organization and supplying arbitrary file URIs to presign or stream bucket contents.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| HumanSignal | label-studio | 0 – through 1.23.0 |
Weakness: CWE-639 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
References
- GitHub Issue #9924 issue-tracking
- https://github.com/HumanSignal/label-studio product
- io_storages/proxy_api.py at 1.23.0 technical-description
- VulnCheck Advisory: Label Studio through 1.23.0 Cross-Organization Storage URI Resolution third-party-advisory