HumanSignal vulnerabilities
We track 9 vulnerabilities in HumanSignal products across 3 products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on November 3, 2026.
Latest HumanSignal vulnerabilities
- 7.7 High severity
label-studio: Server-Side Request Forgery
Label Studio before 1.23.2 (label-studio-sdk before 2.1.2) contains a server-side request forgery vulnerability that allows authenticated users to read internal URLs through image-bearing export formats. Attackers can import tasks with data.image pointing at i
- 7.7 High severity
label-studio: Authorization Bypass Through User-Controlled Key
Label Studio fails to apply organization filters when resolving storage URIs for tasks and projects in proxy_api.py endpoints. Attackers can access other tenants' cloud storage objects by creating a separate organization and supplying arbitrary file URIs to pr
- 8.5 High severity
label-studio: Server-Side Request Forgery
Label Studio through 1.23.0 fails to validate webhook URLs, allowing authenticated users to dispatch requests to internal services including RFC 1918 addresses and cloud metadata endpoints. Attackers can create webhooks targeting private networks and exfiltrat
- 8.8 High severity
label-studio: Authorization Bypass Through User-Controlled Key
Label Studio does not scope the annotation detail endpoint to the requesting user's organization. AnnotationAPI in label_studio/tasks/api.py declares queryset = Annotation.objects.all() and provides no get_queryset override, so the default lookup retrieves any
- 7.8 High severity
label-studio-ml-backend: Deserialization of Untrusted Data
A vulnerability has been found in HumanSignal label-studio-ml-backend up to 9fb7f4aa186612806af2becfb621f6ed8d9fdbaf and classified as problematic. Affected by this vulnerability is the function load of the file label-studio-ml-backend/label_studio_ml/examples
- 7.7 High severity
label-studio: Server-Side Request Forgery
Label Studio is an open source data labeling tool. Prior to version 1.16.0, Label Studio's S3 storage integration feature contains a Server-Side Request Forgery (SSRF) vulnerability in its endpoint configuration. When creating an S3 storage connection, the app
- 8.7 High severity
label-studio: Improper Limitation of a Pathname to a Restricted Directory
Label Studio is an open source data labeling tool. A path traversal vulnerability in Label Studio SDK versions prior to 1.0.10 allows unauthorized file access outside the intended directory structure. The flaw exists in the VOC, COCO and YOLO export functional
- 7.5 High severity
label-studio: Exposure of Sensitive Information to an Unauthorized Actor
Label Studio is an open source data labeling tool. In all current versions of Label Studio prior to 1.9.2post0, the application allows users to insecurely set filters for filtering tasks. An attacker can construct a filter chain to filter tasks based on sensit
- 8.8 High severity
label-studio: Exposure of Sensitive Information to an Unauthorized Actor
Label Studio is a multi-type data labeling and annotation tool with standardized output format. There is a vulnerability that can be chained within the ORM Leak vulnerability to impersonate any account on Label Studio. An attacker could exploit these vulnerabi