https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T03:04:44.982465+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-85211 CVE-2026-85211 — Label Studio through 1.23.0 Cross-Organization Storage URI Resolution 2026-10-05T03:04:44.983891+00:00

Affected: HumanSignal label-studio

Label Studio fails to apply organization filters when resolving storage URIs for tasks and projects in proxy_api.py endpoints. Attackers can access other tenants' cloud storage objects by creating a separate organization and supplying arbitrary file URIs to presign or stream bucket contents.