AI and data stack advisories

Severe, 6 weeks1498Projects326

1498 severe, 6 weeks · 326 projects

GradioGHSA-pgfv-gvc5-prfg

Gradio Vulnerable to Arbitrary File Deletion

Gradio

CVE-2024-10648 · Published Mar 20, 2025 · updated Jul 7, 2026

High8.2
No fix yet
GitHub advisory

A path traversal vulnerability exists in the Gradio Audio component of gradio-app/gradio, as of version git 98cbcae. This vulnerability allows an attacker to control the format of the audio file, leading to arbitrary file content deletion. By manipulating the output format, an attacker can reset any file to an empty file, causing a denial of service (DOS) on the server.

Affected versions

PackageAffectedFixed in
gradio
PyPI
>= 4.0.0, <= 5.0.0b2No fix yet
Details and references

More Gradio advisories

All Gradio