GradioGHSA-prpg-p95c-32fv
Gradio Path Traversal vulnerability
Medium5.3CVE-2024-12217 · Published Mar 20, 2025 · updated Jul 7, 2026
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| gradio PyPI | <= 5.0.1 | No fix yet |
Details and references
A vulnerability in the gradio-app/gradio repository, version git 67e4044, allows for path traversal on Windows OS. The implementation of the blocked_path functionality, which is intended to disallow users from reading certain files, is flawed. Specifically, while the application correctly blocks access to paths like 'C:/tmp/secret.txt', it fails to block access when using NTFS Alternate Data Streams (ADS) syntax, such as 'C:/tmp/secret.txt::$DATA'. This flaw can lead to unauthorized reading of blocked file paths.
More Gradio advisories
All Gradio| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Mar 202025 | Gradio Vulnerable to Denial of Service (DoS) via Crafted Zip Bomb CVE-2024-10569High7.5no fix yet | High7.5 | No fix yet |
| Mar 202025 | Gradio Vulnerable to Arbitrary File Deletion CVE-2024-10648High8.2no fix yet | High8.2 | No fix yet |
| Mar 202025 | Gradio Vulnerable to Denial of Service (DoS) via Crafted HTTP Request CVE-2024-10624High7.5no fix yet | High7.5 | No fix yet |
| Mar 202025 | Gradio Vulnerable to Open Redirect CVE-2024-8021Medium5.4no fix yet | Medium5.4 | No fix yet |
| Mar 202025 | Gradio DOS in multipart boundry while uploading the file CVE-2024-8966High7.5no fix yet | High7.5 | No fix yet |
| Jan 142025 | Gradio Blocked Path ACL Bypass Vulnerability CVE-2025-23042Criticalfixed in 5.11.0 | Critical | 5.11.0 |