Beveiligingsadvies

CVE-2026-85211

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-03 14:12:22

Laatst bijgewerkt 2026-09-03 14:37:19

Toegewezen door VulnCheck

CVSS-score 8.3

Status PUBLISHED

Beschrijving

Label Studio fails to apply organization filters when resolving storage URIs for tasks and projects in proxy_api.py endpoints. Attackers can access other tenants' cloud storage objects by creating a separate organization and supplying arbitrary file URIs to presign or stream bucket contents.

← Alle CVE's bekijken Bekijk op cve.org ↗