CVE-2026-85211: Authorization Bypass Through User-Controlled Key in HumanSignal label-studio
Description
Label Studio fails to apply organization filters when resolving storage URIs for tasks and projects in proxy_api.py endpoints. Attackers can access other tenants' cloud storage objects by creating a separate organization and supplying arbitrary file URIs to presign or stream bucket contents.
CVSS v4.0
Score 8.3high
Affected software
HumanSignal
label-studio
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Label Studio fails to enforce organization-based access controls when resolving storage URIs for tasks and projects within proxy_api.py endpoints. As a result, an attacker can bypass authorization by creating a separate organization and providing arbitrary cloud storage URIs, enabling unauthorized access to other tenants' cloud storage objects. This vulnerability affects versions from 0 up to and including 1.23.0 and has a CVSS 4.0 score of 8.3, indicating high severity.
Potential Impact
Attackers with low privileges can bypass authorization controls to access cloud storage objects of other tenants, potentially exposing sensitive data stored in those buckets. This compromises tenant isolation and confidentiality within the affected versions of label-studio.
Mitigation Recommendations
No official patch or remediation details are provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the proxy_api.py endpoints and monitor for suspicious activity related to storage URI requests.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-09-03T13:44:49.184Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a9982b8acd9273b4909fd79
Added to database: 09/03/2026, 14:22:48 UTC
Last enriched: 09/25/2026, 02:46:42 UTC
Last updated: 10/18/2026, 06:48:20 UTC
Views: 76
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.