label-studio has 8 CVEs on record between 2023 and 2026. The median CVSS is 7.1 (high). None have a confirmed exploitation report.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.1
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Products
- label-studio 8
Worst active — by depth score
CVE-2023-47117High· 7.5Label Studio Object Relational Mapper Leak Vulnerability in Filtering Task54CVE-2023-47115High· 7.1Cross-site Scripting Vulnerability on Avatar Upload51CVE-2025-25297High· 8.6Label Studio allows Server-Side Request Forgery in the S3 Storage Endpoint47CVE-2025-25296Medium· 6.1Label Studio allows Cross-Site Scripting (XSS) via GET request to `/projects/upload-example` endpoint46CVE-2026-22033HighLabel Studio is vulnerable to full account takeover by chaining Stored XSS + IDOR in User Profile via custom_hotkeys field41
label-studio vulnerabilities
CVEs affecting label-studio, newest first. Open any entry for full detail, references, and exploit status.
8 CVEsRSS
CVE-2026-22033HighLabel Studio is vulnerable to full account takeover by chaining Stored XSS + IDOR in User Profile via custom_hotkeys field
Label Studio is vulnerable to full account takeover by chaining Stored XSS + IDOR in User Profile via custom_hotkeys field
CVE-2025-25296Medium· 6.1PoCLabel Studio allows Cross-Site Scripting (XSS) via GET request to `/projects/upload-example` endpoint
Label Studio allows Cross-Site Scripting (XSS) via GET request to `/projects/upload-example` endpoint
CVE-2025-25297High· 8.6Label Studio allows Server-Side Request Forgery in the S3 Storage Endpoint
Label Studio allows Server-Side Request Forgery in the S3 Storage Endpoint
CVE-2023-47116Medium· 5.3Label Studio SSRF on Import Bypassing `SSRF_PROTECTION_ENABLED` Protections
Label Studio SSRF on Import Bypassing `SSRF_PROTECTION_ENABLED` Protections
CVE-2023-47115High· 7.1PoCCross-site Scripting Vulnerability on Avatar Upload
Cross-site Scripting Vulnerability on Avatar Upload
CVE-2024-23633Medium· 4.7Cross-site Scripting Vulnerability on Data Import
Cross-site Scripting Vulnerability on Data Import
CVE-2023-47117High· 7.5PoCLabel Studio Object Relational Mapper Leak Vulnerability in Filtering Task
Label Studio Object Relational Mapper Leak Vulnerability in Filtering Task
GHSA-cpmr-mw4j-99r7High· 7.5Nginx alias path traversal allows unauthenticated attackers to read all files on /label_studio/core/
Nginx alias path traversal allows unauthenticated attackers to read all files on /label_studio/core/