CVE-2025-25296

Label Studio is an open source data labeling tool. Prior to version 1.16.0, Label Studio's `/projects/upload-example` endpoint allows injection of arbitrary HTML through a `GET` request with an appropriately crafted `label_config` query parameter. By crafting a specially formatted XML label config with inline task data containing malicious HTML/JavaScript, an attacker can achieve Cross-Site Scripting (XSS). While the application has a Content Security Policy (CSP), it is only set in report-only mode, making it ineffective at preventing script execution. The vulnerability exists because the upload-example endpoint renders user-provided HTML content without proper sanitization on a GET request. This allows attackers to inject and execute arbitrary JavaScript in victims' browsers by getting them to visit a maliciously crafted URL. This is considered vulnerable because it enables attackers to execute JavaScript in victims' contexts, potentially allowing theft of sensitive data, session hijacking, or other malicious actions. Version 1.16.0 contains a patch for the issue.

• CWE-79

• https://github.com/HumanSignal/label-studio/commit/8cf6958e1e27ef6a03ed287e674470975d340885Patch
• https://github.com/HumanSignal/label-studio/security/advisories/GHSA-wpq5-3366-mqw4Exploit, Mitigation, Vendor Advisory

Published

Feb 14, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-25290@octokit/request sends parameterized requests to GitHub’s AP…5.3
• CVE-2025-25291ruby-saml provides security assertion markup language (SAML)…9.8
• CVE-2025-25292ruby-saml provides security assertion markup language (SAML)…9.8
• CVE-2025-25293ruby-saml provides security assertion markup language (SAML)…7.5
• CVE-2025-25294Envoy Gateway is an open source project for managing Envoy P…5.3
• CVE-2025-25295Label Studio is an open source data labeling tool. A path tr…8.7
• CVE-2025-25297Label Studio is an open source data labeling tool. Prior to …7.7
• CVE-2025-25298Strapi is an open source headless CMS. The @strapi/core pack…5.3
• CVE-2025-25299CKEditor 5 is a modern JavaScript rich-text editor with an M…2.3
• CVE-2025-2530Luxion KeyShot DAE File Parsing Access of Uninitialized Poin…7.8
• CVE-2025-25300smartbanner.js is a customizable smart app banner for iOS an…1.3
• CVE-2025-25301Rembg is a tool to remove images background. In Rembg 2.0.57…7.5