AI agent vulnerability · Gradio

CVE-2023-34239: Gradio vulnerable to arbitrary file read and proxying of arbitrary URLs

mediumCVSS 4.0 6.9 · 3.1 7.3GHSA-3qqg-pgqq-3695

Impact There are two separate security vulnerabilities here: (1) a security vulnerability that allows users to read arbitrary files on the machines that are running shared Gradio apps (2) the ability of users to use machines that are sharing Gradio apps to proxy arbitrary URLs Patches Both problems have been solved, please upgrade gradio to 3.34.0 or higher Workarounds Not possible to workaround except by taking…

Published Jun 9, 2023 · Updated Sep 20, 2024

Affected packages

gradio

Ecosystem: PyPI
Affected: < 3.34.0
Fixed in: 3.34.0
Check: pip show gradio

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Impact

There are two separate security vulnerabilities here: (1) a security vulnerability that allows users to read arbitrary files on the machines that are running shared Gradio apps (2) the ability of users to use machines that are sharing Gradio apps to proxy arbitrary URLs

Patches

Both problems have been solved, please upgrade gradio to 3.34.0 or higher

Workarounds

Not possible to workaround except by taking down any shared Gradio apps

References

Relevant PRs:

https://github.com/gradio-app/gradio/pull/4406
https://github.com/gradio-app/gradio/pull/4370

Credited to mastomii.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Gradio vulnerabilities

All Gradio entries