Advisoriesby Ibis
Gradio security advisories
53 advisories · 5 critical or high in 12 months · latest Jul 1
53 advisories
Gradio FileExplorer preprocess path traversal allows files outside root_dir to reach callbacksCVE-2026-49119fixed in 6.16.0Gradio: path traversalCVE-2026-49119fixed in 6.16.0Gradio: Audio cache key ignores metadata when saving numpy audio outputsCVE-2026-10783fixed in 6.15.1Gradio contains a cookie injection vulnerabilityCVE-2026-48545fixed in 6.15.0Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config ProcessingCVE-2026-28416fixed in 6.6.0Gradio has an Open Redirect in its OAuth FlowCVE-2026-28415fixed in 6.6.0Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+CVE-2026-28414fixed in 6.7.0Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session SecretCVE-2026-27167fixed in 6.6.0Gradio Allows Unauthorized File Copy via Path ManipulationCVE-2025-48889fixed in 5.31.0Gradio CORS Origin Validation Bypass VulnerabilityCVE-2025-5320no fix yetGradio DOS in multipart boundry while uploading the fileCVE-2024-8966no fix yetGradio Vulnerable to Open RedirectCVE-2024-8021no fix yetGradio Path Traversal vulnerabilityCVE-2024-12217no fix yetGradio Vulnerable to Denial of Service (DoS) via Crafted Zip BombCVE-2024-10569no fix yetGradio Vulnerable to Arbitrary File DeletionCVE-2024-10648no fix yetGradio Vulnerable to Denial of Service (DoS) via Crafted HTTP RequestCVE-2024-10624no fix yetGradio Blocked Path ACL Bypass VulnerabilityCVE-2025-23042fixed in 5.11.0Gradio vulnerable to arbitrary file read with File and UploadButton componentsCVE-2024-51751fixed in 5.5.0gradio Server Side Request Forgery vulnerabilityCVE-2024-48052no fix yetGradio's dropdown component pre-process step does not limit the values to those in the dropdown listGHSA-26jh-r8g2-6fprfixed in 5.0.0Gradio has an XSS on every Gradio server via upload of HTML files, JS files, or SVG filesCVE-2024-47872fixed in 5.0.0Gradio uses insecure communication between the FRP client and serverCVE-2024-47871fixed in 5.0.0Gradio has a race condition in update_root_in_config may redirect user trafficCVE-2024-47870fixed in 5.0.0Gradio performs a non-constant-time comparison when comparing hashesCVE-2024-47869fixed in 4.44.0Gradio has several components with post-process steps allow arbitrary file leaksCVE-2024-47868fixed in 5.0.0Gradio lacks integrity checking on the downloaded FRP clientCVE-2024-47867fixed in 5.0.0In Gradio, the `enable_monitoring` flag set to `False` does not disable monitoringCVE-2024-47168fixed in 4.44.0Gradio vulnerable to SSRF in the path parameter of /queue/joinCVE-2024-47167fixed in 5.0.0Gradio has a one-level read path traversal in `/custom_component`CVE-2024-47166fixed in 4.44.0Gradio's CORS origin validation accepts the null originCVE-2024-47165fixed in 5.0.0Gradio's `is_in_or_equal` function may be bypassedCVE-2024-47164fixed in 5.0.0Gradios's CORS origin validation is not performed when the request has a cookieCVE-2024-47084fixed in 4.44.0Gradio allows users to access arbitrary filesCVE-2024-1728fixed in 4.19.2Gradio: code injectionCVE-2024-39236no fix yetOpen redirect in gradioCVE-2024-4940no fix yetLocal file inclusion in gradioCVE-2024-4941fixed in 4.31.3Server-Side Request Forgery in gradioCVE-2024-4325no fix yetGradio: command injectionCVE-2024-4253fixed in 4.29.0Gradio applications running locally vulnerable to 3rd party websites accessing routes and uploading filesCVE-2024-1727fixed in 4.19.2Gradio's Component Server does not properly consider` _is_server_fn` for functionsCVE-2024-34511fixed in 4.13.0Gradio allows credential leakage on WindowsCVE-2024-34510fixed in 4.20.0gradio vulnerable to Path TraversalCVE-2024-1561fixed in 4.13.0gradio Server-Side Request Forgery vulnerabilityCVE-2024-1183fixed in 4.10.0gradio Server-Side Request Forgery vulnerabilityCVE-2024-2206fixed in 4.18.0Gradio apps vulnerable to timing attacks to guess passwordCVE-2024-1729fixed in 4.19.2Gradio Path Traversal vulnerabilityCVE-2024-0964fixed in 4.9.0Gradio makes the `/file` secure against file traversal and server-side request forgery attacksCVE-2023-51449fixed in 4.11.0Gradio Exposure of Sensitive Information to an Unauthorized Actor vulnerabilityCVE-2023-6572fixed in 4.14.0Gradio arbitrary file upload vulnerabilityCVE-2023-41626no fix yetGradio vulnerable to arbitrary file read and proxying of arbitrary URLsCVE-2023-34239fixed in 3.34.0Update share links to use FRP instead of SSH tunnelingCVE-2023-25823fixed in 3.13.1Improper Neutralization of Formula Elements in a CSV File in Gradio FlaggingCVE-2022-24770fixed in 2.8.11Files on the host computer can be accessed from the Gradio interfaceCVE-2021-43831fixed in 2.5.0