ZoomEye finds 4,451 exposed Label Studio instances

ZoomEye discovered 4,451 internet-reachable instances of the Label Studio annotation platform. Such services hold source data, labels and annotator credentials, and their export function can dump an entire project.

• Queries for title="Label Studio" and app="Label Studio" each returned 4,451 results
• The platform stores source data, labels and annotator logins
• Project export is available to admin accounts and dumps all data
• Teams are advised to put the service behind a VPN or authenticated proxy