Label Studio server-side request forgery and API token exposure

Data-labeling tool: logged-in users can peek inside and steal the owner's key.

Summary

An authenticated user of Label Studio can make the server read internal URLs and send the organization owner's API token to an attacker's server. Label Studio before 1.23.2 and label-studio-sdk before 2.1.2 are affected.

Affected when

authenticated account (ordinary member is enough)
export with images in YOLO or COCO format

What to do

Update label-studio to 1.23.2 and label-studio-sdk to 2.1.2 or later.

Update to at least the version for your product:

label-studio 1.23.2 or later
label-studio-sdk 2.1.2 or later

Products and platforms

label-studio
label-studio-sdk

CVE IDs

CVE-2026-121561 (opens in a new tab)

Sources

Advisory: github.com (opens in a new tab)
Write-up: github.com (opens in a new tab) · github.com (opens in a new tab) · github.com (opens in a new tab) · vulncheck.com (opens in a new tab)

Times

First published 2026-11-03 15:17 UTC

First seen 2026-11-09 14:50 UTC