A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml' workflow. The vulnerability arises due to improper neutralization of special elements used in a command, allowing for unauthorized modification of the base repository or secret
Critical9.1CVE-2024-4253 · Published Jun 4, 2024 · updated Jul 13, 2026
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| gradio PyPI | < 4.29.0 | 4.29.0 |
Details and references
A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml' workflow. The vulnerability arises due to improper neutralization of special elements used in a command, allowing for unauthorized modification of the base repository or secrets exfiltration. The issue affects versions up to and including '@gradio/video@0.6.12'. The flaw is present in the workflow's handling of GitHub context information, where it echoes the full name of the head repository, the head branch, and the workflow reference without adequate sanitization. This could potentially lead to the exfiltration of sensitive secrets such as 'GITHUB_TOKEN', 'COMMENT_TOKEN', and 'CHROMATIC_PROJECT_TOKEN'.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- Severity from
- the CVSS score
- Also known as
- CVE-2024-4253
More Gradio advisories
All Gradio| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Jun 62024 | Local file inclusion in gradio CVE-2024-4941High7.5fixed in 4.31.3 | High7.5 | 4.31.3 |
| Jun 62024 | Server-Side Request Forgery in gradio CVE-2024-4325High8.6no fix yet | High8.6 | No fix yet |
| May 212024 | Gradio applications running locally vulnerable to 3rd party websites accessing routes and uploading files CVE-2024-1727Medium4.3fixed in 4.19.2 | Medium4.3 | 4.19.2 |
| Jun 222024 | Open redirect in gradio CVE-2024-4940Medium5.4no fix yet | Medium5.4 | No fix yet |
| Jul 12024 | Gradio v4.36.1 was discovered to contain a code injection vulnerability via the component /gradio/component_meta.py. This vulnerability is triggered via a crafted input. NOTE: the supplier disputes this because the report is about a user attacking himself. CVE-2024-39236Critical9.8no fix yet | Critical9.8 | No fix yet |
| May 52024 | Gradio's Component Server does not properly consider` _is_server_fn` for functions CVE-2024-34511Medium6.5fixed in 4.13.0 | Medium6.5 | 4.13.0 |