GradioGHSA-m842-4qm8-7gpq
Gradio allows users to access arbitrary files
Critical8.1CVE-2024-1728 · Published Sep 25, 2024 · updated Jun 29, 2026
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| gradio PyPI | < 4.19.2 | 4.19.2 |
Details and references
### Impact This vulnerability allows users of Gradio applications that have a public link (such as on Hugging Face Spaces) to access files on the machine hosting the Gradio application. This involves intercepting and modifying the network requests made by the Gradio app to the server. ### Patches Yes, the problem has been patched in Gradio version 4.19.2 or higher. We have no knowledge of this exploit being used against users of Gradio applications, but we encourage all users to upgrade to Gradio 4.19.2 or higher. Fixed in: https://github.com/gradio-app/gradio/commit/16fbe9cd0cffa9f2a824a0165beb43446114eec7 CVE: https://nvd.nist.gov/vuln/detail/CVE-2024-1728
- CVSS 3.1
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-22
- Also known as
- CVE-2024-1728, PYSEC-2026-345
More Gradio advisories
All Gradio| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Oct 102024 | Gradios's CORS origin validation is not performed when the request has a cookie CVE-2024-47084High8.8fixed in 4.44.0 | High8.8 | 4.44.0 |
| Oct 102024 | Gradio's `is_in_or_equal` function may be bypassed CVE-2024-47164Medium6.5fixed in 5.0.0 | Medium6.5 | 5.0.0 |
| Oct 102024 | Gradio's CORS origin validation accepts the null origin CVE-2024-47165Medium5.4fixed in 5.0.0 | Medium5.4 | 5.0.0 |
| Oct 102024 | Gradio has a one-level read path traversal in `/custom_component` CVE-2024-47166Medium5.3fixed in 4.44.0 | Medium5.3 | 4.44.0 |
| Oct 102024 | Gradio vulnerable to SSRF in the path parameter of /queue/join CVE-2024-47167Medium7.2fixed in 5.0.0 | Medium7.2 | 5.0.0 |
| Oct 102024 | In Gradio, the `enable_monitoring` flag set to `False` does not disable monitoring CVE-2024-47168Low4.3fixed in 4.44.0 | Low4.3 | 4.44.0 |