Path Traversal in Humansignal Label-studio

CVE-2025-25295

Label Studio is an open source data labeling tool. A path traversal vulnerability in Label Studio SDK versions prior to 1.0.10 allows unauthorized file access outside the intended directory structure. The flaw exists in the VOC, COCO and Y…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.001 (32.2th percentile) — read the EPSS interpretation.