CVE-2022-24770highCWE-1236

CVE-2022-24770: high-severity vulnerability in gradio-app gradio

Improper Neutralization of Formula Elements in a CSV File in Gradio Flagging

Published · Updated

Follow this CVE+ Monitor gradio+ Monitor gradio

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 1.3%
In short

Gradio's flagging feature saves user input directly into CSV files without protection. When opened in Excel or similar programs, this allows attackers to inject and execute arbitrary commands on the user's computer.

Technical detail

CSV injection vulnerability in Gradio's flagging mechanism (CWE-1236) allows unauthenticated users to inject formula elements into exported CSV files. When a developer opens the malicious CSV in spreadsheet applications that auto-execute formulas, arbitrary OS commands can be executed with the privileges of the user opening the file. Fixed in version 2.8.11 via single-quote escaping.

Summary generated and translated by AI from the official description.
`gradio` is an open source framework for building interactive machine learning models and demos. Prior to version 2.8.11, `gradio` suffers from Improper Neutralization of Formula Elements in a CSV File. The `gradio` library has a flagging functionality which saves input/output data into a CSV file on the developer's computer. This can allow a user to save arbitrary text into the CSV file, such as commands. If a program like MS Excel opens such a file, then it automatically runs these commands, which could lead to arbitrary commands running on the user's computer. The problem has been patched as of `2.8.11`, which escapes the saved csv with single quotes. As a workaround, avoid opening csv files generated by `gradio` with Excel or similar spreadsheet programs.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
gradio-app · gradio
Related CVEs — gradio-app gradio

In the same product, most dangerous first.

CVE-2023-51449MEDIUMMake the `/file` secure against file traversal attacksEPSS 28.3%CVE-2026-28416HIGHGradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config ProcessingEPSS 7.3%CVE-2021-43831HIGHFiles on the host computer can be accessed from the Gradio interfaceEPSS 3.9%CVE-2026-28414HIGHGradio has Absolute Path Traversal on Windows with Python 3.13+EPSS 3.1%CVE-2025-23042HIGHGradio Blocked Path ACL Bypass VulnerabilityEPSS 1.0%CVE-2024-47868MEDIUMSeveral components’ post-process steps may allow arbitrary file leaks in GradioEPSS 0.8%