CVE-2026-22033

Label Studio is a multi-type data labeling and annotation tool. In 1.22.0 and earlier, a persistent stored cross-site scripting (XSS) vulnerability exists in the custom_hotkeys functionality of the application. An authenticated attacker (or one who can trick a user/administrator into updating their custom_hotkeys) can inject JavaScript code that executes in other users’ browsers when those users load any page using the templates/base.html template. Because the application exposes an API token endpoint (/api/current-user/token) to the browser and lacks robust CSRF protection on some API endpoints, the injected script may fetch the victim’s API token or call token reset endpoints — enabling full account takeover and unauthorized API access.

• CWE-79
• CWE-284
• CWE-79

• https://github.com/HumanSignal/label-studio/commit/ea2462bf042bbf370b79445d02a205fbe547b505Patch
• https://github.com/HumanSignal/label-studio/pull/9084Issue Tracking
• https://github.com/HumanSignal/label-studio/security/advisories/GHSA-2mq9-hm29-8qchExploit, Vendor Advisory

Published

Jan 12, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-22028Preact, a lightweight web development framework, JSON serial…6.1
• CVE-2026-22029React Router is a router for React. In @remix-run/router ver…6.1
• CVE-2026-2203A flaw has been found in Tenda AC8 16.03.33.05. Affected by …8.8
• CVE-2026-22030React Router is a router for React. In @remix-run/server-run…6.5
• CVE-2026-22031@fastify/middie is the plugin that adds middleware support o…8.8
• CVE-2026-22032Directus is a real-time API and App dashboard for managing S…6.1
• CVE-2026-22034Snuffleupagus is a module that raises the cost of attacks ag…9.8
• CVE-2026-22035Greenshot is an open source Windows screenshot utility. Vers…7.3
• CVE-2026-22036Undici is an HTTP/1.1 client for Node.js. Prior to 7.18.0 an…7.5
• CVE-2026-22037The @fastify/express plugin adds full Express compatibility …8.4
• CVE-2026-22038AutoGPT is a platform that allows users to create, deploy, a…8.1
• CVE-2026-22039Kyverno is a policy engine designed for cloud native platfor…9.9