CVE-2026-85211: Label Studio through 1.23.0 Cross-Organization Storage URI Resolution
Label Studio fails to apply organization filters when resolving storage URIs for tasks and projects in proxyapi.py endpoints. Attackers can access other tenants' cloud storage objects by creating a separate organization and supplying arbitrary file URIs to presign or stream bucket contents.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Label Studioto a version that resolves this vulnerability.Fixed in 1.23.0Patch Cross-Organization Storage URI Resolution
Event History
Frequently Asked Questions
Who is exposed to this issue?
Label Studio deployments through version 1.23.0 that host multiple organizations and allow users to create or use a separate organization are exposed. The impact is cross-organization access to cloud storage objects associated with another tenant.
What does an attacker need to exploit it?
An attacker needs low-privileged access to Label Studio and the ability to create a separate organization. They can then supply arbitrary file URIs to the affected presign or streaming endpoints.
What data can be accessed?
The issue can expose cloud storage objects belonging to other organizations because organization filters are not applied during storage URI resolution for tasks and projects. The reported impact is confidentiality loss; integrity and availability impacts are not indicated.
Are default single-organization deployments affected?
The described attack relies on cross-organization access, so the provided information identifies multi-organization deployments as the relevant exposure scenario. The data does not establish impact for a deployment that has only one organization.