Gradio vulnerabilities and CVEs
The Beam CVE database tracks 50 security advisories for Gradio: 4 critical, 20 high, 21 medium and 5 low severity. The newest is CVE-2026-49119, published Jul 1, 2026 and fixed in 6.16.0.
A Python library for building web interfaces for models, widely used for demos and Hugging Face Spaces.
Check your version: pip show gradio
- Vulnerabilities tracked
- 50
- Critical
- 4
- Known exploited (CISA KEV)
- 0
- Published in the last 30 days
- 0
All entries, newest first
CVE-2026-49119
Gradio FileExplorer preprocess path traversal allows files outside root_dir to reach callbacks
high7.5Jul 1, 2026CVE-2026-10783
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
low2.5Jun 4, 2026CVE-2026-48545
Gradio contains a cookie injection vulnerability
high6.8May 27, 2026CVE-2026-27167
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
lowMar 1, 2026CVE-2026-28414
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
high7.5Mar 1, 2026CVE-2026-28415
Gradio has an Open Redirect in its OAuth Flow
medium4.3Mar 1, 2026CVE-2026-28416
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
high8.2Mar 1, 2026CVE-2025-48889
Gradio Allows Unauthorized File Copy via Path Manipulation
medium5.3May 29, 2025CVE-2025-5320
Gradio CORS Origin Validation Bypass Vulnerability
low3.7No fixMay 29, 2025CVE-2024-10569
Gradio Vulnerable to Denial of Service (DoS) via Crafted Zip Bomb
high7.5No fixMar 20, 2025CVE-2024-10624
Gradio Vulnerable to Denial of Service (DoS) via Crafted HTTP Request
high7.5No fixMar 20, 2025CVE-2024-10648
Gradio Vulnerable to Arbitrary File Deletion
high8.2No fixMar 20, 2025CVE-2024-12217
Gradio Path Traversal vulnerability
medium5.3No fixMar 20, 2025CVE-2024-8021
Gradio Vulnerable to Open Redirect
medium5.4No fixMar 20, 2025CVE-2024-8966
Gradio DOS in multipart boundry while uploading the file
high7.5No fixMar 20, 2025CVE-2025-23042
Gradio Blocked Path ACL Bypass Vulnerability
critical9.1Jan 14, 2025CVE-2024-51751
Gradio vulnerable to arbitrary file read with File and UploadButton components
medium6.9Nov 6, 2024CVE-2024-48052
gradio Server Side Request Forgery vulnerability
medium6.5No fixNov 5, 2024CVE-2024-47084
Gradios's CORS origin validation is not performed when the request has a cookie
high8.8Oct 10, 2024CVE-2024-47164
Gradio's `is_in_or_equal` function may be bypassed
medium6.5Oct 10, 2024CVE-2024-47165
Gradio's CORS origin validation accepts the null origin
medium5.4Oct 10, 2024CVE-2024-47166
Gradio has a one-level read path traversal in `/custom_component`
medium5.3Oct 10, 2024CVE-2024-47167
Gradio vulnerable to SSRF in the path parameter of /queue/join
medium7.2Oct 10, 2024CVE-2024-47168
In Gradio, the `enable_monitoring` flag set to `False` does not disable monitoring
low4.3Oct 10, 2024CVE-2024-47867
Gradio lacks integrity checking on the downloaded FRP client
high7.5Oct 10, 2024CVE-2024-47868
Gradio has several components with post-process steps allow arbitrary file leaks
medium5.3Oct 10, 2024CVE-2024-47869
Gradio performs a non-constant-time comparison when comparing hashes
medium3.7Oct 10, 2024CVE-2024-47870
Gradio has a race condition in update_root_in_config may redirect user traffic
high7.0Oct 10, 2024CVE-2024-47871
Gradio uses insecure communication between the FRP client and server
high8.1Oct 10, 2024CVE-2024-47872
Gradio has an XSS on every Gradio server via upload of HTML files, JS files, or SVG files
medium5.4Oct 10, 2024GHSA-26jh-r8g2-6fpr
Gradio's dropdown component pre-process step does not limit the values to those in the dropdown list
low5.3Oct 10, 2024CVE-2024-1728
Gradio allows users to access arbitrary files
critical8.1Sep 25, 2024CVE-2024-4940
Open redirect in gradio
medium5.4No fixJun 22, 2024CVE-2024-4325
Server-Side Request Forgery in gradio
high8.6No fixJun 6, 2024CVE-2024-4941
Local file inclusion in gradio
high7.5Jun 6, 2024CVE-2024-1727
Gradio applications running locally vulnerable to 3rd party websites accessing routes and uploading files
medium4.3May 21, 2024CVE-2024-34510
Gradio allows credential leakage on Windows
high7.5May 5, 2024CVE-2024-34511
Gradio's Component Server does not properly consider` _is_server_fn` for functions
medium6.5May 5, 2024CVE-2024-1183
gradio Server-Side Request Forgery vulnerability
medium6.5Apr 16, 2024CVE-2024-1561
gradio vulnerable to Path Traversal
high7.5Apr 16, 2024CVE-2024-2206
gradio Server-Side Request Forgery vulnerability
high7.3Mar 27, 2024CVE-2024-1729
Gradio apps vulnerable to timing attacks to guess password
medium5.9Feb 22, 2024CVE-2024-0964
Gradio Path Traversal vulnerability
high7.5Feb 6, 2024CVE-2023-51449
Gradio makes the `/file` secure against file traversal and server-side request forgery attacks
high8.6Dec 21, 2023CVE-2023-6572
Gradio Exposure of Sensitive Information to an Unauthorized Actor vulnerability
critical9.6Dec 14, 2023CVE-2023-41626
Gradio arbitrary file upload vulnerability
medium4.8No fixSep 16, 2023CVE-2023-34239
Gradio vulnerable to arbitrary file read and proxying of arbitrary URLs
medium7.3Jun 9, 2023CVE-2023-25823
Update share links to use FRP instead of SSH tunneling
medium5.4Feb 23, 2023CVE-2022-24770
Improper Neutralization of Formula Elements in a CSV File in Gradio Flagging
high8.8Mar 18, 2022CVE-2021-43831
Files on the host computer can be accessed from the Gradio interface
critical8.3Jan 21, 2022
Withdrawn advisories (4)
CVE-2024-39236
Withdrawn Advisory: Gradio was discovered to contain a code injection vulnerability via the component /gradio/component_meta.py
critical9.8WithdrawnJul 1, 2024GHSA-3f95-mxq2-2f63
Duplicate Advisory: Gradio Local File Inclusion vulnerability
high7.5WithdrawnApr 10, 2024CVE-2024-1540
Gradio's CI vulnerable to Command Injection
high8.6WithdrawnMar 27, 2024GHSA-3x9g-xfj5-fq84
Duplicate Advisory: Cross-Site Request Forgery in Gradio
medium4.3WithdrawnMar 21, 2024