Iniciar sesión
Deutsch English Español Polski
Media

Gradio has several components with post-process steps allow arbitrary file leaks

  • Publicada: 10.10.2024
  • Actualizado: 11.10.2026 12:19

Impact

What kind of vulnerability is it? Who is impacted?

This is a data validation vulnerability affecting several Gradio components, which allows arbitrary file leaks through the post-processing step. Attackers can exploit these components by crafting requests that bypass expected input constraints. This issue could lead to sensitive files being exposed to unauthorized users, especially when combined with other vulnerabilities, such as issue TOB-GRADIO-15. The components most at risk are those that return or handle file data.

Vulnerable Components:

  1. String to FileData: DownloadButton, Audio, ImageEditor, Video, Model3D, File, UploadButton.
  2. Complex data to FileData: Chatbot, MultimodalTextbox.
  3. Direct file read in preprocess: Code.
  4. Dictionary converted to FileData: ParamViewer, Dataset.

Exploit Scenarios:

  1. A developer creates a Dropdown list that passes values to a DownloadButton. An attacker bypasses the allowed inputs, sends an arbitrary file path (like /etc/passwd), and downloads sensitive files.
  2. An attacker crafts a malicious payload in a ParamViewer component, leaking sensitive files from a server through the arbitrary file leak.

Patches

Yes, the issue has been resolved in gradio>5.0. Upgrading to the latest version will mitigate this vulnerability.

Software afectado

Haz clic en una tecnología para ver todas sus vulnerabilidades.

PlataformaPaqueteVersiones vulnerablesCorregida en
Python (PyPI) gradio < 5.0.0 5.0.0

Referencias

Puntuación CVSS 5.3/10
Vector CVSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Debilidad (CWE)
CWE-200, CWE-22
Plataforma
Python (PyPI)
Paquete
gradio
Publicada
10.10.2024
Actualizado
11.10.2026 12:19

Fuentes y licencias

OSV / GitHub Advisory Database - PYSEC-2024-217 - PyPA Advisory Database; CC BY 4.0

OSV / GitHub Advisory Database - GHSA-4q3c-cj7g-jcwf - CC BY 4.0

Historial de vulnerabilidades: gradio

Todas las vulnerabilidades publicadas de este paquete (Python (PyPI)), de la más reciente a la más antigua. Muestra si es un fallo aislado o un paquete que hay que vigilar.

Todas (51) en el archivo
Entradas en total
51
Primera → última
12.2021 07.2026
Sin corrección
13
Explotada en ataques
0

Distribución por gravedad

  • Crítica 5
  • Alta 19
  • Media 22
  • Baja 5

Divulgaciones por año

Gravedad:
  1. Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplyi
    Alta CVE-2026-49119 < 6.16.0 6.16.0
  2. Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
    Alta · 8.2 CVE-2026-28416 < 6.6.0 6.6.0
  3. Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
    Alta · 7.5 CVE-2026-28414 < 6.7.0 6.7.0
  4. Gradio DOS in multipart boundry while uploading the file
    Alta · 7.5 CVE-2024-8966 <= 5.22.0 sin corrección
  5. Gradio Vulnerable to Denial of Service (DoS) via Crafted HTTP Request
    Alta · 7.5 CVE-2024-10624 >= 4.38.0, <= 5.0.0-beta.2 sin corrección
  6. Gradio Vulnerable to Arbitrary File Deletion
    Alta · 8.2 CVE-2024-10648 >= 4.0.0, <= 5.0.0b2 sin corrección
  7. Gradio Vulnerable to Denial of Service (DoS) via Crafted Zip Bomb
    Alta · 7.5 CVE-2024-10569 >= 4.0.0, <= 5.0.0b2 sin corrección
  8. Gradio Blocked Path ACL Bypass Vulnerability
    Crítica CVE-2025-23042 < 5.11.0 5.11.0
  9. Gradio uses insecure communication between the FRP client and server
    Alta · 8.1 CVE-2024-47871 < 5.0.0 5.0.0
  10. Gradio has a race condition in update_root_in_config may redirect user traffic
    Alta · 7.0 CVE-2024-47870 < 5.0.0 5.0.0
  11. Gradio has several components with post-process steps allow arbitrary file leaks esta entrada
    Media · 5.3 CVE-2024-47868 < 5.0.0 5.0.0
  12. Gradio lacks integrity checking on the downloaded FRP client
    Alta · 7.5 CVE-2024-47867 < 5.0.0 5.0.0
  13. Gradios's CORS origin validation is not performed when the request has a cookie
    Alta · 8.8 CVE-2024-47084 < 4.44.0 4.44.0
  14. Gradio allows users to access arbitrary files
    Alta · 8.1 CVE-2024-1728 < 4.19.2 4.19.2
  15. Server-Side Request Forgery in gradio
    Alta · 8.6 CVE-2024-4325 <= 4.36.0 sin corrección
  16. A local file inclusion vulnerability exists in the JSON component of gradio-app/gradio version 4.25. The vulnerability arises from improper input validation in the `postprocess()` function within `gra
    Alta · 7.5 CVE-2024-4941 < 4.31.4 4.31.4
  17. A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml' workflow. The vulnerability arises due to improper neutralization of special
    Crítica · 9.1 CVE-2024-4253 < 4.29.0 4.29.0
  18. Gradio before 4.20 allows credential leakage on Windows.
    Alta · 7.5 CVE-2024-34510 < 4.20.0 4.20.0
  19. gradio vulnerable to Path Traversal
    Alta · 7.5 CVE-2024-1561 < 4.13.0 4.13.0
  20. gradio Server-Side Request Forgery vulnerability
    Alta · 7.3 CVE-2024-2206 < 4.18.0 4.18.0
  21. A local file include could be remotely triggered in Gradio due to a vulnerable user-supplied JSON value in an API request.
    Crítica · 9.4 CVE-2024-0964 la fuente no lo indica sin corrección
  22. Gradio makes the `/file` secure against file traversal and server-side request forgery attacks
    Alta · 8.6 CVE-2023-51449 < 4.11.0 4.11.0
  23. Gradio Exposure of Sensitive Information to an Unauthorized Actor vulnerability
    Crítica · 9.6 CVE-2023-6572 < 4.14.0 4.14.0
  24. `gradio` is an open source framework for building interactive machine learning models and demos. Prior to version 2.8.11, `gradio` suffers from Improper Neutralization of Formula Elements in a CSV Fil
    Alta · 8.8 CVE-2022-24770 < 2.8.11 2.8.11
  25. Files on the host computer can be accessed from the Gradio interface
    Crítica · 8.3 CVE-2021-43831 < 2.5.0 2.5.0

Identifica las vulnerabilidades de tu aplicación

Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.

Conectar tu aplicación
Newsletter DockRay

La seguridad de tus aplicaciones en tu correo

Vulnerabilidades importantes, recomendaciones concretas y consejos prácticos para tus aplicaciones. Elige tus tecnologías y sigue lo que importa para tu proyecto.

  • Un resumen diario de nuevas vulnerabilidades, también las críticas.
  • Avisos sobre actualizaciones importantes.
  • Consejos prácticos sobre seguridad y monitorización de aplicaciones.

Déjalo vacío para recibir avisos de todas las tecnologías.

Política de privacidad

Suscripción gratuita. Date de baja con un clic en cualquier correo.