Sign in
Deutsch English Español Polski
Medium

Summary

  • Disclosed: 22.02.2024
  • Updated: 11.10.2026 12:20

Summary

On all Label Studio versions prior to 1.11.0, data imported via file upload feature is not properly sanitized prior to being rendered within a Choices or Labels tag, resulting in an XSS vulnerability.

Details

Need permission to use the "data import" function. This was reproduced on Label Studio 1.10.1.

PoC

  1. Create a project. Create a project

  2. Upload a file containing the payload using the "Upload Files" function. 2 Upload a file containing the payload using the Upload Files function 3 complete

The following are the contents of the files used in the PoC

{
  "data": {
    "prompt": "labelstudio universe image",
    "images": [
      {
        "value": "id123#0",
        "style": "margin: 5px",
        "html": "<img width='400' src='https://labelstud.io/_astro/images-tab.64279c16_ZaBSvC.avif' onload=alert(document.cookie)>"
      }
    ]
  }
}

  1. Select the text-to-image generation labeling template of Ranking and scoring 3 Select the text-to-image generation labelling template for Ranking and scoring 5 save

  2. Select a task 4 Select a task

  3. Check that the script is running 5 Check that the script is running

Impact

Malicious scripts can be injected into the code, and when linked with vulnerabilities such as CSRF, it can cause even greater damage. In particular, It can become a source of further attacks, especially when linked to social engineering.

Affected software

Click a technology to see all vulnerabilities affecting it.

PlatformPackageVulnerable versionsFixed in
Python (PyPI) label-studio < 1.11.0 1.11.0

References

CVSS score 6.1/10
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness (CWE)
CWE-79
Platform
Python (PyPI)
Package
label-studio
Disclosed
22.02.2024
Updated
11.10.2026 12:20

Sources and licenses

OSV / GitHub Advisory Database - GHSA-6xv9-957j-qfhg - CC BY 4.0

OSV / GitHub Advisory Database - PYSEC-2024-249 - PyPA Advisory Database; CC BY 4.0

Vulnerability history: label-studio

All published vulnerabilities of this package (Python (PyPI)), newest first. Shows whether this is a one-off slip or a package that needs watching.

All (12) in the archive
Total entries
12
First → latest
10.2022 01.2026
Without a fix
1
Exploited in attacks
0

Severity breakdown

  • Critical 1
  • High 7
  • Medium 4

Disclosures per year

Severity:
  1. Label Studio is vulnerable to full account takeover by chaining Stored XSS + IDOR in User Profile via custom_hotkeys field
    High CVE-2026-22033 <= 1.22.0 no fix
  2. label-studio vulnerable to Cross-Site Scripting (Reflected) via the label_config parameter.
    High CVE-2025-47783 < 1.18.0 1.18.0
  3. Label Studio allows Server-Side Request Forgery in the S3 Storage Endpoint
    High · 8.6 CVE-2025-25297 < 1.16.0 1.16.0
  4. Summary this entry
    Medium · 6.1 CVE-2024-26152 < 1.11.0 1.11.0
  5. Cross-site Scripting Vulnerability on Avatar Upload
    High · 7.1 CVE-2023-47115 < 1.9.2 1.9.2
  6. Label Studio Object Relational Mapper Leak Vulnerability in Filtering Task
    High · 7.5 CVE-2023-47117 < 1.9.2.post0 1.9.2.post0
  7. Label Studio has Hardcoded Django `SECRET_KEY` that can be Abused to Forge Session Tokens
    Critical · 9.8 CVE-2023-43791 < 1.8.2 1.8.2
  8. Nginx alias path traversal allows unauthenticated attackers to read all files on /label_studio/core/
    High · 7.5 ghsa-cpmr-mw4j-99r7 < 1.7.2 1.7.2
  9. A Server Side Request Forgery (SSRF) in the Data Import module in Heartex - Label Studio Community Edition versions 1.5.0 and earlier allows an authenticated user to access arbitrary files on the syst
    High · 6.5 CVE-2022-36551 < 1.5.0.post0 1.5.0.post0

Know which vulnerabilities affect your application

With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.

Connect your application
DockRay newsletter

Application security in your inbox

Important vulnerabilities, actionable guidance and practical advice for your applications. Choose your technologies and follow what matters to your project.

  • A daily digest of new vulnerabilities, critical ones included.
  • Notifications about important updates.
  • Practical advice on application security and monitoring.

Leave empty to receive updates for every technology.

Privacy policy

Free to subscribe. Unsubscribe with one click in any email.