CVE-2026-85211 Details

A cross-organization authorization bypass vulnerability has been identified in Label Studio versions through 1.23.0. The issue arises in the 'proxy_api.py' endpoints, where organization filters are not applied when resolving storage URIs for tasks and projects. This oversight allows attackers to access cloud storage objects belonging to other tenants by creating a separate organization and providing arbitrary file URIs to presign or stream bucket contents.

To address this vulnerability, the 'resolve' endpoints should be scoped to the user's organization. This can be done by filtering the task or project lookups to only include those associated with the user's active organization, and by ensuring that the file URIs provided by the user are tied to keys that are actually referenced by the tasks or projects.