CVE-2026-76073 | HumanSignal Label Studio up to 1.23.0 Annotation Detail Endpoint api.py get_queryset privileges management

August 24, 2026 Yanac

A vulnerability, which was classified as critical, has been found in HumanSignal Label Studio up to 1.23.0. This affects the function get_queryset of the file label_studio/tasks/api.py of the component Annotation Detail Endpoint. The manipulation leads to improper privilege management.

This vulnerability is uniquely identified as CVE-2026-76073. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More