CVE-2026-85211 — Label Studio through 1.23.0 Cross-Organization Storage URI Resolution
Label Studio fails to apply organization filters when resolving storage URIs for tasks and projects in proxy_api.py endpoints. Attackers can access other tenants' cloud storage …
Published: 2026-09-03 · CVSS: 8.3 · CVSS 4.0
Label Studio fails to apply organization filters when resolving storage URIs for tasks and projects in proxy_api.py endpoints. Attackers can access other tenants' cloud storage objects by creating a separate organization and supplying arbitrary file URIs to presign or stream bucket contents.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7