Free AI Safety Workshop — in collaboration with explainx.aiSave your seat
AgentbeamBeta
AI agent vulnerability · Gradio

CVE-2024-8021: Gradio Vulnerable to Open Redirect

mediumCVSS 3.0 5.4GHSA-7v2w-h4gh-w5cv

An open redirect vulnerability exists in the latest version of gradio-app/gradio. The vulnerability allows an attacker to redirect users to a malicious website by URL encoding. This can be exploited by sending a crafted request to the application, which results in a 302 redirect to an attacker-controlled site.

Published Mar 20, 2025 · Updated Mar 21, 2025

Affected packages

gradio

Ecosystem
PyPI
Affected
<= 4.37.2
Fixed in
No patched version yet
Check
pip show gradio

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

An open redirect vulnerability exists in the latest version of gradio-app/gradio. The vulnerability allows an attacker to redirect users to a malicious website by URL encoding. This can be exploited by sending a crafted request to the application, which results in a 302 redirect to an attacker-controlled site.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Gradio vulnerabilities

All Gradio entries