HumanSignal has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 8.1 (high).
CVEs per month
Last 12 months, by publish date
1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.1
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2026-85179High· 8.5Label Studio through 1.23.0 fails to validate webhook URLs, allowing authenticated users to dispatch requests to internal services including RFC 1918 addresses and cloud metadata endpoints59CVE-2026-85211High· 7.7Label Studio fails to apply organization filters when resolving storage URIs for tasks and projects in proxy_api.py endpoints54
HumanSignal vulnerabilities
CVEs affecting HumanSignal, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-85211High· 7.7PoCLabel Studio fails to apply organization filters when resolving storage URIs for tasks and projects in proxy_api.py endpoints
Label Studio fails to apply organization filters when resolving storage URIs for tasks and projects in proxy_api.py endpoints. Attackers can access other tenants' cloud storage objects by creating a separate organization and supplying ar…
▾ MidnightHumanSignal · label-studioEPSS 0.41%via NVD
CVE-2026-85179High· 8.5PoCLabel Studio through 1.23.0 fails to validate webhook URLs, allowing authenticated users to dispatch requests to internal services including RFC 1918 addresses and cloud metadata endpoints
Label Studio through 1.23.0 fails to validate webhook URLs, allowing authenticated users to dispatch requests to internal services including RFC 1918 addresses and cloud metadata endpoints. Attackers can create webhooks targeting private…
▾ MidnightHumanSignal · label-studioEPSS 0.40%via NVD