CVE-2026-72560 | HumanSignal Label Studio up to 1.24.0 Import-From-URL Endpoint server-side request forgery

August 11, 2026 Yanac

A vulnerability categorized as critical has been discovered in HumanSignal Label Studio up to 1.24.0. Impacted is an unknown function of the component Import-From-URL Endpoint. The manipulation results in server-side request forgery.

This vulnerability is cataloged as CVE-2026-72560. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More