All vulnerabilities
CVE-2024-1728GHSA-m842-4qm8-7gpqPYSEC-2026-345

Gradio allows users to access arbitrary files

gradio-app gradiopipLibraries & packages
Open in ThreatlineRecord JSON
CVSS
9.2Critical
ExploitationPublic exploit codeCISA's assessment says proof of concept code is public, assessed 15 May 2024. Not in the KEV catalogCISA via CVE List
Exploit odds (EPSS)85.4%Chance of exploitation activity in the next 30 days, higher than 99% of CVEs. Scored 27 Oct 2026FIRST EPSS
Fixed in4.19.2Fixed versionGitHub
Published10 Apr 2024Updated 27 Oct 2026CVE List

What fixes it

  • 4.19.2gradio, pipGitHub
  • 4.19.2gradio-app/gradioCVE List
  • 4.19.2gradio, PyPIOSVpip install "gradio>=4.19.2"

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Public exploit code and templates 1

  • Scanner templateGradio > 4.19.1 UploadButton - Path TraversalNuclei

Listed so defenders can prioritize. Threatline links to the source and does not host exploit code.

Description

Impact

This vulnerability allows users of Gradio applications that have a public link (such as on Hugging Face Spaces) to access files on the machine hosting the Gradio application. This involves intercepting and modifying the network requests made by the Gradio app to the server.

Patches

Yes, the problem has been patched in Gradio version 4.19.2 or higher. We have no knowledge of this exploit being used against users of Gradio applications, but we encourage all users to upgrade to Gradio 4.19.2 or higher.

Fixed in: https://github.com/gradio-app/gradio/commit/16fbe9cd0cffa9f2a824a0165beb43446114eec7 CVE: https://nvd.nist.gov/vuln/detail/CVE-2024-1728

Text from GitHub Advisory Database

Affected versions 53

  • gradio, pip< 4.19.2GitHub
  • gradio-app/gradioaffected: unspecified before 4.19.2CVE List
  • gradio, PyPIfrom first release, fixed in 4.19.2OSV
  • gradio, PyPI0.1.0OSV
  • gradio, PyPI0.1.1OSV
  • gradio, PyPI0.1.2OSV
  • gradio, PyPI0.1.3OSV
  • gradio, PyPI0.1.4OSV
  • gradio, PyPI0.1.5OSV
  • gradio, PyPI0.1.6OSV
  • gradio, PyPI0.1.7OSV
  • gradio, PyPI0.1.8OSV
  • gradio, PyPI0.1.9OSV
  • gradio, PyPI0.2.0OSV
  • gradio, PyPI0.2.1OSV
  • gradio, PyPI0.3.0OSV
  • gradio, PyPI0.3.1OSV
  • gradio, PyPI0.3.2OSV
  • gradio, PyPI0.3.3OSV
  • gradio, PyPI0.3.4OSV
  • gradio, PyPI0.3.5OSV
  • gradio, PyPI0.4.0OSV
  • gradio, PyPI0.4.1OSV
  • gradio, PyPI0.4.2OSV
  • gradio, PyPI0.4.4OSV
  • gradio, PyPI0.5.0OSV
  • gradio, PyPI0.7.0OSV
  • gradio, PyPI0.7.1OSV
  • gradio, PyPI0.7.2OSV
  • gradio, PyPI0.7.3OSV
  • gradio, PyPI0.7.4OSV
  • gradio, PyPI0.7.5OSV
  • gradio, PyPI0.7.6OSV
  • gradio, PyPI0.7.7OSV
  • gradio, PyPI0.7.8OSV
  • gradio, PyPI0.8.0OSV
  • gradio, PyPI0.8.1OSV
  • gradio, PyPI0.9.0OSV
  • gradio, PyPI0.9.1OSV
  • gradio, PyPI0.9.2OSV
  • gradio, PyPI0.9.3OSV
  • gradio, PyPI0.9.4OSV
  • gradio, PyPI0.9.5OSV
  • gradio, PyPI0.9.6OSV
  • gradio, PyPI0.9.7OSV
  • gradio, PyPI0.9.8OSV
  • gradio, PyPI0.9.9.2OSV
  • gradio, PyPI0.9.9.3OSV
  • gradio, PyPI0.9.9.5OSV
  • gradio, PyPI0.9.9.6OSV
  • gradio, PyPI0.9.9.7OSV
  • gradio, PyPI0.9.9.8OSV
  • gradio, PyPI0.9.9.9OSV

References 7