GHSA-2mq9-hm29-8qch
NoneCVSS
—
EPSS
—
Published
Jan 12, 2026
CISA due date
—
The record
Label Studio is vulnerable to full account takeover by chaining Stored XSS + IDOR in User Profile via custom_hotkeys field
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | label-studio | 0 | No fix |
| Chainguard | label-studio | 0 | 1.22.0-r2 |
Related vulnerabilities
- CVE-2026-22033 Label Studio is vulnerable to full account takeover by chaining Stored XSS + IDOR in User… Same vulnerability
- CVE-2026-25645 Requests is a HTTP library. Also affects label-studio
- CVE-2026-4539 A security flaw has been discovered in pygments up to 2.19.2. Also affects label-studio
- CVE-2026-33230 NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and… Also affects label-studio
- CVE-2026-33231 NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and… Also affects label-studio
- CVE-2026-30922 pyasn1 is a generic ASN.1 library for Python. Also affects label-studio
- CVE-2026-32597 PyJWT is a JSON Web Token implementation in Python. Also affects label-studio
- CVE-2026-32274 Black is the uncompromising Python code formatter. Also affects label-studio