Vulnerability Description
Label Studio through 1.23.0 fails to validate webhook URLs, allowing authenticated users to dispatch requests to internal services including RFC 1918 addresses and cloud metadata endpoints. Attackers can create webhooks targeting private networks and exfiltrate annotation data by enabling payload transmission in outbound requests.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/HumanSignal/label-studio
- https://github.com/HumanSignal/label-studio/blob/1.23.0/label_studio/webhooks/ut
- https://github.com/HumanSignal/label-studio/commit/2c1c1d6472153032af8ed399168f8
- https://github.com/HumanSignal/label-studio/issues/9801
- https://www.vulncheck.com/advisories/label-studio-through-1.23.0-ssrf-via-unvali
FAQ
What is CVE-2026-85179?
CVE-2026-85179 is a vulnerability with a CVSS score of 8.5 (HIGH). Label Studio through 1.23.0 fails to validate webhook URLs, allowing authenticated users to dispatch requests to internal services including RFC 1918 addresses and cloud metadata endpoints. Attackers ...
How severe is CVE-2026-85179?
CVE-2026-85179 has been rated HIGH with a CVSS base score of 8.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-85179?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.