PT-2025-7076 · Unknown · Label Studio
Xbow-Security
·
Published
2025-02-14
·
Updated
2025-08-25
·
CVE-2025-25297
CVSS v3.1
8.6
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
Label Studio versions prior to 1.16.0
Description:
Label Studio's S3 storage integration feature contains a Server-Side Request Forgery (SSRF) vulnerability in its endpoint configuration. When creating an S3 storage connection, the application allows users to specify a custom S3 endpoint URL via the
s3 endpoint parameter. This endpoint URL is passed directly to the boto3 AWS SDK without proper validation or restrictions on the protocol or destination. The vulnerability allows an attacker to make the application send HTTP requests to arbitrary internal services by specifying them as the S3 endpoint. When the storage sync operation is triggered, the application attempts to make S3 API calls to the specified endpoint, effectively making HTTP requests to the target service and returning the response in error messages. This SSRF vulnerability enables attackers to bypass network segmentation and access internal services that should not be accessible from the external network. The vulnerability is particularly severe because error messages from failed requests contain the full response body, allowing data exfiltration from internal services.Recommendations:
To resolve the issue, update to version 1.16.0 or later, which contains a patch for the SSRF vulnerability. As a temporary workaround, consider implementing strict validation of S3 endpoint URLs to allow only valid S3 service endpoints, adding an allowlist of endpoint domains and protocols, and sanitizing error messages to prevent leakage of sensitive information from failed requests. Additionally, consider implementing network-level controls to restrict outbound connections from the application server.
Exploit
Fix
SSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Label Studio