CVE-2026-22033: Label Studio Full Account Takeover via Chained Stored XSS and IDOR
Summary
CVE-2026-22033: Prologue These vulnerabilities have been found and chained by DCODX-AI. Affects label-studio versions < 1.22.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Label Studio is an open-source data labeling tool that enables users to create and manage labeling projects for machine learning. It provides a user-friendly interface for annotating data and supports various data types. However, it has a critical vulnerability that allows for full account takeover through a combination of stored cross-site scripting (XSS) and insecure direct object references (IDOR).
Vulnerability Detail
The vulnerability arises from a persistent stored XSS flaw in the custom_hotkeys feature of Label Studio. An authenticated attacker can inject malicious JavaScript code into the custom_hotkeys field, which is then executed in the browsers of other users when they access pages that render this field. The injected script can exploit the application's API token endpoint, allowing attackers to retrieve victims' API tokens and potentially take over their accounts. The vulnerability is exacerbated by the lack of robust CSRF protection on certain API endpoints, making it easier for attackers to execute their malicious scripts.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users should avoid using the custom_hotkeys feature until the package is updated. Additionally, implementing strict input validation and output encoding for user-controlled fields can help mitigate the risk of XSS attacks.
Conclusion
CVE-2026-22033 represents a significant security risk for users of Label Studio, allowing for full account takeover through a combination of stored XSS and IDOR vulnerabilities. It is crucial for users to update to the patched version and implement security best practices to mitigate the risk.
See every vulnerability recorded for label-studio →
FAQ
CVE-2026-22033 is a vulnerability in Label Studio that allows for full account takeover through a combination of stored XSS and IDOR.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which monitors open-source vulnerabilities in real-time.
The vulnerability can lead to full account takeover, unauthorized API access, data exfiltration, and potential system compromise if exploited by an attacker.
You can update Label Studio by running the command pip install --upgrade label-studio in your terminal.
Vulert is a tool that monitors and alerts for open-source vulnerabilities in software using the Pipfile.lock, providing real-time insights without requiring code access.
References
Related vulnerabilities
Recent vulnerabilities recorded for label-studio.
