Server-Side Request Forgery in Label Studio's S3 Storage Integration

CVE-2025-25297

What is CVE-2025-25297?

Label Studio, an open-source data labeling tool, has a vulnerability in its S3 storage integration prior to version 1.16.0. This vulnerability allows attackers to exploit the application's configuration by specifying a malicious S3 endpoint URL. The URL is forwarded directly to the boto3 AWS SDK without adequate validation, enabling attackers to initiate HTTP requests to arbitrary internal services. When a sync operation occurs, the vulnerable application makes S3 API calls to the custom endpoint and includes the responses in error messages, inadvertently revealing sensitive data from the internal services. This vulnerability undermines network segmentation and provides a pathway for data exfiltration, making it crucial for users to update to version 1.16.0, which contains the necessary fix.

References