GHSA-6437-7wc6-gmx5: Label Studio before 1.23.2 SSRF and Token Disclosure via Image Export Downloads
Label Studio before 1.23.2 (label-studio-sdk before 2.1.2) contains a server-side request forgery vulnerability that allows authenticated users to read internal URLs through image-bearing export formats. Attackers can import tasks with data.image pointing at internal services, export as YOLO or COCO with images to read responses, and spoof Host to capture the organization owner's API token.
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated Label Studio user can exploit it. The attacker needs to be able to import tasks whose data.image field points to a target internal URL, then export them in YOLO or COCO format with images.
What systems or data are exposed through the SSRF?
Internal URLs reachable by the Label Studio server may be read through image-bearing exports. The issue can also be used with Host header spoofing to capture the organization owner's API token.
Which versions should be remediated?
Label Studio versions before 1.23.2 and label-studio-sdk versions before 2.1.2 are affected. Upgrade to at least those versions.