An SSRF vulnerability in Label Studio allows authenticated attackers to dispatch unauthorized requests to internal network resources and cloud metadata services.

This vulnerability is a Server-Side Request Forgery (SSRF) flaw occurring within the webhook utility functions. An authenticated user can configure a malicious webhook URL to force the application to send requests to internal network segments (RFC 1918) or cloud instance metadata endpoints, potentially leading to data exfiltration.

Successful exploitation allows an attacker to bypass network perimeters and interact with internal services that are not exposed to the public internet. This can lead to the compromise of sensitive internal data, the theft of cloud environment credentials via metadata services, and unauthorized actions against other internal applications. Given the CVSS score of 8.5, this high severity risk requires immediate attention to prevent lateral movement and information disclosure.

Immediate Action: Upgrade to the latest version of Label Studio, which contains the necessary URL validation logic to prevent requests to restricted IP ranges.

Proactive Monitoring: Review audit logs for suspicious webhook configurations, specifically those pointing to internal IP addresses (such as 127.0.0.1, 169.254.169.254, or private RFC 1918 ranges).

Compensating Controls: Implement egress filtering on the host running the Label Studio application to restrict outbound network connections to known, trusted external domains only.

Public Exploit Available: No (exploit_available: unknown)

The severity of this SSRF vulnerability necessitates an immediate update to a patched version of Label Studio. Security teams should prioritize patching to prevent potential internal reconnaissance and credential theft. In the interim, ensure that the application is deployed with the principle of least privilege regarding its network access to the underlying infrastructure.