# Label Studio Nginx path traversal allows unauthorized file access

Source: https://junglewise.ai/threats/label-studio-nginx-path-traversal-allows-unauthorized-file-access-08f7d110  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2023-03-24. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

Severity: high · CVSS 7.5 · Published 2023-03-24

Label Studio is an open-source data labeling platform used for machine learning workflows. Its default deployment uses Nginx with a misconfigured static file serving rule that allows attackers to bypass access restrictions and read sensitive application files like Django configuration and secret keys. An attacker with network access can exploit this without authentication to steal secrets used for session management and potentially take over user accounts or access the application database.

Technologies: [label-studio (PyPI)](https://junglewise.ai/threats/technologies/label-studio). Vendors: [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is This vulnerability exploited in the wild?** No. Junglewise Threat Intelligence has no report of This vulnerability being exploited in the wild.

**How severe is This vulnerability?** High severity, with a CVSS score of 7.5, published 24 March 2023.

**Which products and versions are affected?** label-studio (PyPI) <= 1.7.1.

**Is there a fix for This vulnerability?** A patch was published on 2023-03-24: Fixed in Label Studio version 1.7.2 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is This vulnerability attacked?** It is attacked over the network, in a web application.

**Am I affected?** Check whether you run label-studio (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is a path traversal flaw in the Nginx configuration file (deploy/default.conf) affecting the /static location directive. The root cause is a missing trailing slash in the location pattern: `location /static` instead of the secure `location /static/`. This misconfiguration allows Nginx to match requests like `/static../settings/label_studio.py`, which traverses to the parent directory and accesses files outside the intended static asset directory. The vulnerability requires no authentication or user interaction—any network-accessible Label Studio instance using the default Nginx deployment is exposed. Attackers can read arbitrary files in the /label_studio/core/ directory, including Django settings files containing secret keys, database credentials, and other sensitive configuration. The issue affects Label Studio versions ≤ 1.7.1 and was patched in version 1.7.2.

## Affected products

- HumanSignal Label Studio <= 1.7.1

## Timeline

- 2023-03-24: disclosed: Vulnerability disclosed via GitHub Advisory GHSA-cpmr-mw4j-99r7
- 2023-03-24: patched: Fixed in Label Studio version 1.7.2

## References

- [https://api.github.com/users/c3l3si4n](https://api.github.com/users/c3l3si4n)
- [https://github.com/c3l3si4n](https://github.com/c3l3si4n)
- [https://api.github.com/users/c3l3si4n/gists%7B/gist_id%7D](https://api.github.com/users/c3l3si4n/gists%7B/gist_id%7D)
- [https://api.github.com/users/c3l3si4n/repos](https://api.github.com/users/c3l3si4n/repos)
- [https://avatars.githubusercontent.com/u/39219175?v=4](https://avatars.githubusercontent.com/u/39219175?v=4)
- [https://api.github.com/users/c3l3si4n/events%7B/privacy%7D](https://api.github.com/users/c3l3si4n/events%7B/privacy%7D)

## Related threats

- [Label Studio stored XSS in custom_hotkeys with account takeover](https://junglewise.ai/threats/cve-2026-22033-label-studio-stored-xss-in-custom-hotkeys-with-account-takeover)
- [PYSEC-2026-1503 - Label Studio allows Server-Side Request Forgery in the S3 Storage Endpoint](https://junglewise.ai/threats/cve-2025-25297-label-studio-allows-server-side-request-forgery-in-the-s3-storage)
- [PYSEC-2026-1504 - Label Studio allows Cross-Site Scripting (XSS) via GET request to `/projects/upload-example` endpoint](https://junglewise.ai/threats/cve-2025-25296-label-studio-allows-cross-site-scripting-xss-via-get-request-to)
- [HumanSignal Label Studio reflected XSS in label_config parameter](https://junglewise.ai/threats/cve-2025-47783-humansignal-label-studio-reflected-xss-in-label-config-parameter)
- [Label Studio vulnerable to Cross-site Scripting if `<Choices>` or `<Labels>` are used in labeling config](https://junglewise.ai/threats/cve-2024-26152-label-studio-vulnerable-to-cross-site-scripting-if-choices-or)