https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T21:25:39.906082+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-375006 EUVD-2026-375006 2026-10-06T21:25:39.960263+00:00 EUVD-2026-375006 https://cve.radiocsirt.org/vuln/fkie_cve-2026-85211 fkie_cve-2026-85211 2026-10-06T21:25:39.960320+00:00

Label Studio fails to apply organization filters when resolving storage URIs for tasks and projects in proxy_api.py endpoints. Attackers can access other tenants' cloud storage objects by creating a separate organization and supplying arbitrary file URIs to presign or stream bucket contents.

 https://cve.radiocsirt.org/vuln/ghsa-jhvx-775r-cm5m GHSA-jhvx-775r-cm5m 2026-10-06T21:25:39.960372+00:00

Label Studio fails to apply organization filters when resolving storage URIs for tasks and projects in proxy_api.py endpoints. Attackers can access other tenants' cloud storage objects by creating a separate organization and supplying arbitrary file URIs to presign or stream bucket contents.