AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

GradioGHSA-m842-4qm8-7gpq

Gradio allows users to access arbitrary files

Gradio

CVE-2024-1728 · Published Sep 25, 2024 · updated Oct 27, 2026

Critical8.1
Fix: upgrade to 4.19.2 or later
GitHub advisory

Impact

This vulnerability allows users of Gradio applications that have a public link (such as on Hugging Face Spaces) to access files on the machine hosting the Gradio application. This involves intercepting and modifying the network requests made by the Gradio app to the server.

Patches

Yes, the problem has been patched in Gradio version 4.19.2 or higher. We have no knowledge of this exploit being used against users of Gradio applications, but we encourage all users to upgrade to Gradio 4.19.2 or higher.

Fixed in: https://github.com/gradio-app/gradio/commit/16fbe9cd0cffa9f2a824a0165beb43446114eec7

CVE: https://nvd.nist.gov/vuln/detail/CVE-2024-1728

Affected versions

PackageAffectedFixed in
gradio
PyPI
< 4.19.24.19.2
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity from
GitHub (reviewed advisory)
Weakness
CWE-22
Also known as
CVE-2024-1728, PYSEC-2026-345

More Gradio advisories

All Gradio
Low 4.3Oct 10, 2024In Gradio, the `enable_monitoring` flag set to `False` does not disable monitoringCVE-2024-47168fixed in 4.44.0Medium 7.2Oct 10, 2024Gradio vulnerable to SSRF in the path parameter of /queue/joinCVE-2024-47167fixed in 5.0.0Medium 5.3Oct 10, 2024Gradio has a one-level read path traversal in `/custom_component`CVE-2024-47166fixed in 4.44.0Medium 5.4Oct 10, 2024Gradio's CORS origin validation accepts the null originCVE-2024-47165fixed in 5.0.0Medium 6.5Oct 10, 2024Gradio's `is_in_or_equal` function may be bypassedCVE-2024-47164fixed in 5.0.0High 8.8Oct 10, 2024Gradios's CORS origin validation is not performed when the request has a cookieCVE-2024-47084fixed in 4.44.0