CVE-2023-51449: medium-severity vulnerability in gradio-app gradio
Make the `/file` secure against file traversal attacks
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
33Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 5.6epss 28%
Gradio is an open-source Python package that allows you to quickly build a demo or web application for your machine learning model, API, or any arbitary Python function. Versions of `gradio` prior to 4.11.0 contained a vulnerability in the `/file` route which made them susceptible to file traversal attacks in which an attacker could access arbitrary files on a machine running a Gradio app with a public URL (e.g. if the demo was created with `share=True`, or on Hugging Face Spaces) if they knew the path of files to look for. This issue has been patched in version 4.11.0.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected products
gradio-app · gradioRelated CVEs — gradio-app gradio
In the same product, most dangerous first.
CVE-2026-28416HIGHGradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config ProcessingEPSS 7.3%CVE-2021-43831HIGHFiles on the host computer can be accessed from the Gradio interfaceEPSS 3.9%CVE-2026-28414HIGHGradio has Absolute Path Traversal on Windows with Python 3.13+EPSS 3.1%CVE-2022-24770HIGHImproper Neutralization of Formula Elements in a CSV File in Gradio FlaggingEPSS 1.3%CVE-2025-23042HIGHGradio Blocked Path ACL Bypass VulnerabilityEPSS 1.0%CVE-2024-47868MEDIUMSeveral components’ post-process steps may allow arbitrary file leaks in GradioEPSS 0.8%