Is This vulnerability exploited in the wild?

No. Junglewise Threat Intelligence has no report of This vulnerability being exploited in the wild.

How severe is This vulnerability?

High severity, with a CVSS score of 7.5, published 24 March 2023.

Is there a fix for This vulnerability?

A patch was published on 2023-03-24: Fixed in Label Studio version 1.7.2 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is This vulnerability attacked?

It is attacked over the network, in a web application.

Check whether you run label-studio (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Label Studio Nginx path traversal allows unauthorized file access

Severity: high · CVSS 7.5 · Published 2023-03-24

Label Studio is an open-source data labeling platform used for machine learning workflows. Its default deployment uses Nginx with a misconfigured static file serving rule that allows attackers to bypass access restrictions and read sensitive application files like Django configuration and secret keys. An attacker with network access can exploit this without authentication to steal secrets used for session management and potentially take over user accounts or access the application database.

Technologies: label-studio (PyPI). Vendors: PyPI.

Quick answers

Is This vulnerability exploited in the wild?: No. Junglewise Threat Intelligence has no report of This vulnerability being exploited in the wild.
How severe is This vulnerability?: High severity, with a CVSS score of 7.5, published 24 March 2023.
Which products and versions are affected?: label-studio (PyPI) <= 1.7.1.
Is there a fix for This vulnerability?: A patch was published on 2023-03-24: Fixed in Label Studio version 1.7.2 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is This vulnerability attacked?: It is attacked over the network, in a web application.
Am I affected?: Check whether you run label-studio (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is a path traversal flaw in the Nginx configuration file (deploy/default.conf) affecting the /static location directive. The root cause is a missing trailing slash in the location pattern: `location /static` instead of the secure `location /static/`. This misconfiguration allows Nginx to match requests like `/static../settings/label_studio.py`, which traverses to the parent directory and accesses files outside the intended static asset directory. The vulnerability requires no authentication or user interaction—any network-accessible Label Studio instance using the default Nginx deployment is exposed. Attackers can read arbitrary files in the /label_studio/core/ directory, including Django settings files containing secret keys, database credentials, and other sensitive configuration. The issue affects Label Studio versions ≤ 1.7.1 and was patched in version 1.7.2.

Affected products

HumanSignal Label Studio <= 1.7.1

Timeline

2023-03-24: disclosed: Vulnerability disclosed via GitHub Advisory GHSA-cpmr-mw4j-99r7
2023-03-24: patched: Fixed in Label Studio version 1.7.2

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.