Free AI Safety Workshop — in collaboration with explainx.aiSave your seat
AgentbeamBeta
AI agent vulnerability · Gradio

CVE-2024-1540: Gradio's CI vulnerable to Command Injection

highCVSS 3.0 8.6GHSA-xcgp-r7r8-2hc9

This advisory was withdrawn on Mar 27, 2024. The publisher no longer considers it a valid vulnerability.

A command injection vulnerability exists in the deploy+test-visual.yml workflow of the gradio-app/gradio repository, due to improper neutralization of special elements used in a command. This vulnerability allows attackers to execute unauthorized commands, potentially leading to unauthorized modification of the base repository or secrets exfiltration.

Published Mar 27, 2024 · Updated Apr 16, 2024

Affected packages

gradio

Ecosystem
PyPI
Affected
< 4.18.0
Fixed in
4.18.0
Check
pip show gradio

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

A command injection vulnerability exists in the deploy+test-visual.yml workflow of the gradio-app/gradio repository, due to improper neutralization of special elements used in a command. This vulnerability allows attackers to execute unauthorized commands, potentially leading to unauthorized modification of the base repository or secrets exfiltration. The issue arises from the unsafe handling of GitHub context information within a an action definition which is evaluated and substituted before script execution. Remediation involves setting untrusted input values to intermediate environment variables to prevent direct influence on script generation.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Gradio vulnerabilities

All Gradio entries