CVE-2026-85179: Label Studio through 1.23.0 SSRF via Unvalidated Webhook URL
Label Studio through 1.23.0 fails to validate webhook URLs, allowing authenticated users to dispatch requests to internal services including RFC 1918 addresses and cloud metadata endpoints. Attackers can create webhooks targeting private networks and exfiltrate annotation data by enabling payload transmission in outbound requests.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Label Studioto a version that resolves this vulnerability.Fixed in 1.23.0
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated Label Studio user who can create webhooks can target internal services, including RFC 1918 addresses and cloud metadata endpoints.
Is user interaction required for exploitation?
No. The attacker can create a webhook and have Label Studio dispatch the outbound request without another user taking action.
What data could be exposed through this flaw?
Annotation data can be exfiltrated when the attacker enables payload transmission in outbound webhook requests.
What should be reviewed to identify possible exploitation?
Review configured webhooks for destinations in private address ranges or cloud metadata endpoints, and check whether those webhooks have outbound payload transmission enabled.
What mitigation is available if an update cannot be applied immediately?
Restrict or disable webhook creation for untrusted authenticated users and remove or block webhooks targeting private networks or cloud metadata endpoints.