Quick answers
- Is CVE-2026-76073 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-76073 being exploited in the wild.
- How severe is CVE-2026-76073?
- High severity, with a CVSS score of 8.8, published 24 August 2026.
- Which products and versions are affected?
- HumanSignal Label Studio 1.23.0 and earlier.
- Is there a fix for CVE-2026-76073?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-76073 attacked?
- It is attacked over the network, in a web application.
- Am I affected by CVE-2026-76073?
- Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
The AnnotationAPI and AnnotationConvertAPI views in label_studio/tasks/api.py declare an unscoped queryset (Annotation.objects.all()) with no get_queryset override, and rely on permission checks that authenticate users but do not enforce object-level organization boundaries. Permission checks (annotations.view, annotations.change, annotations.delete) are registered with rules.is_authenticated in label_studio/core/permissions.py, allowing any logged-in account to pass. Because annotation primary keys are sequential integers, an attacker can enumerate identifiers to access annotations belonging to other organizations. The sibling task endpoint correctly constrains its queryset to the requester's active organization; the annotation endpoint omits this boundary.
Affected products
- HumanSignal Label Studio 1.23.0 and earlier
Timeline
- 2026-08-24: disclosed
- other: CVE-2026-76073 assigned