Label Studio Vulnerabilities

pip AI Tools

AI Threat Alert tracks 7 known vulnerabilities in Label Studio — an AI/ML ai tools in the pip ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

Data sources

Risk Score

Total CVEs

Critical

pip

Ecosystem

Jan 12, 2026

Last CVE

71%

Patch Rate

145d

Avg Time to Patch

27,698 stars 3,602 forks 893 issues 1 dependents Last push Jun 26, 2026

View on GitHub

Known Vulnerabilities (7 total, page 1 of 1)

Severity CVE ID Summary CVSS Published

MEDIUM CVE-2022-36551 Label Studio: SSRF + file read, self-reg bypass 6.5 Oct 4, 2022 HIGH CVE-2025-25295 Label Studio SDK: path traversal leaks server filesystem -- Feb 14, 2025 MEDIUM CVE-2025-25296 Label Studio: reflected XSS via label_config param 6.1 Feb 14, 2025 HIGH CVE-2025-25297 Label Studio: SSRF via S3 endpoint exposes internal services 8.6 Feb 14, 2025 HIGH CVE-2025-47783 Label Studio: XSS enables unauthorized actions via CSRF -- May 15, 2025 HIGH CVE-2026-22033 label-studio: XSS enables session hijacking -- Jan 12, 2026 HIGH CVE-2025-5173 label-studio-ml: PyTorch .pt deserialization RCE in YOLO loader 7.8 May 26, 2025

Frequently asked questions

What is Label Studio?

Label Studio is an AI/ML ai tools tracked by AI Threat Alert for security vulnerabilities in the pip ecosystem.

How many known vulnerabilities does Label Studio have?

Label Studio has 7 known CVEs, tracked from NVD and GitHub Advisory.

Which ecosystem is Label Studio distributed in?

Label Studio is distributed via the pip ecosystem and categorized as ai tools.

Where does the Label Studio vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of Label Studio?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor Label Studio in your stack

Get instant alerts when new vulnerabilities affect Label Studio. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring