Label Studio hat eine Path Traversal Vulnerability über das Feld 'image'

The path traversal vulnerability in Label Studio SDK allows an attacker to manipulate file paths within the VOC, COCO, and YOLO export functionalities. By crafting malicious requests, an attacker can bypass intended access controls and retrieve arbitrary files from the server's file system. This could lead to the exposure of sensitive configuration files, source code, or even user data stored on the system. The potential blast radius depends on the permissions of the process running the Label Studio SDK and the sensitivity of the files accessible from that location. Successful exploitation could compromise the confidentiality and integrity of the entire Label Studio deployment.

Organizations using Label Studio for data annotation and labeling, particularly those processing sensitive data, are at risk. Shared hosting environments where Label Studio instances share the same file system are especially vulnerable, as a compromise of one instance could lead to access to data from other instances. Users relying on older Label Studio versions or those who have not applied security updates are also at increased risk.

• python / sdk: Check Label Studio SDK version using pip show label-studio-sdk. • python / sdk: Monitor file system access logs for unusual activity from the Label Studio process, particularly attempts to access files outside the expected directories. • generic web: Inspect Label Studio export endpoints for suspicious file path parameters using curl or wget. • generic web: Review access and error logs for indications of path traversal attempts (e.g., requests containing ../ sequences).

1. 2025-02-14Disclosure

   disclosure

1. Reserviert2025-02-06
2. Veröffentlicht2025-02-14
3. EPSS aktualisiert2026-04-02

The primary mitigation for CVE-2025-25295 is to upgrade both Label Studio and the Label Studio SDK to versions 1.16.0 or later, respectively. If an immediate upgrade is not feasible, consider implementing stricter file access controls on the server hosting Label Studio to limit the potential impact of a successful exploit. Web application firewalls (WAFs) configured to detect and block path traversal attempts can provide an additional layer of defense. Monitor Label Studio logs for unusual file access patterns that might indicate an ongoing attack.