AI agent vulnerability · Gradio

CVE-2024-12217: Gradio Path Traversal vulnerability

mediumCVSS 3.0 5.3GHSA-prpg-p95c-32fv

A vulnerability in the gradio-app/gradio repository, version git 67e4044, allows for path traversal on Windows OS. The implementation of the blockedpath functionality, which is intended to disallow users from reading certain files, is flawed.

Published Mar 20, 2025 · Updated Mar 21, 2025

Affected packages

gradio

Ecosystem: PyPI
Affected: <= 5.0.1
Fixed in: No patched version yet
Check: pip show gradio

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

A vulnerability in the gradio-app/gradio repository, version git 67e4044, allows for path traversal on Windows OS. The implementation of the blocked_path functionality, which is intended to disallow users from reading certain files, is flawed. Specifically, while the application correctly blocks access to paths like 'C:/tmp/secret.txt', it fails to block access when using NTFS Alternate Data Streams (ADS) syntax, such as 'C:/tmp/secret.txt::$DATA'. This flaw can lead to unauthorized reading of blocked file paths.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Gradio vulnerabilities

All Gradio entries