Threats affecting pkg:github/humansignal/label-studio

CVE-2026-76073 is a high-severity authorization bypass vulnerability in HumanSignal's label-studio product. The annotation detail endpoint does not restrict access to annotations based on the requesting user's organization, allowing authenticated users to access, modify, or delete annotations belonging to other organizations by enumerating annotation IDs. This occurs because the API uses an unscoped queryset that retrieves all annotations without filtering by organization, unlike sibling endpoints that enforce organization boundaries.

Label Studio is a multi-type data labeling and annotation tool. In 1.22.0 and earlier, a persistent stored cross-site scripting (XSS) vulnerability exists in the custom_hotkeys functionality of the application. An authenticated attacker (or one who can trick a user/administrator into updating their custom_hotkeys) can inject JavaScript code that executes in other users’ browsers when those users load any page using the templates/base.html template. Because the application exposes an API token endpoint (/api/current-user/token) to the browser and lacks robust CSRF protection on some API endpoints, the injected script may fetch the victim’s API token or call token reset endpoints — enabling full account takeover and unauthorized API access.