TI-2024-01606 Aliases CVE-2024-1727 GHSA-48cq-79qq-6f7x

CSRF Vulnerability in gradio-app/gradio

MEDIUM 53CWE-352Published 2024-03-21 · Updated 2024-08-01

Key facts

Attack vector: Network
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: Tampering
Confidentiality · integrity · availability: None · None · Low
Fix status: Fixed

Attack profile from CVSS 3.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-352.

Summary

A Cross-Site Request Forgery (CSRF) vulnerability in gradio-app/gradio allows attackers to upload multiple large files to a victim's system if they are running Gradio locally. By crafting a malicious HTML page that triggers an unauthorized file upload to the victim's server, an attacker can deplete the system's disk space, potentially leading to a denial of service. This issue affects the file upload functionality as implemented in gradio/routes.py.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00352 29th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed gradio-app/gradio (gradio-app): 4.19.2gradio (PyPI): 4.19.2

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
gradio-app	gradio-app/gradio	before 4.19.2	4.19.2	Patch available	CNA
—	gradio (PyPI)	before 4.19.2	4.19.2	Patch available	GHSA-48cq-79qq-6f7x

gradio-app/gradio Vendorgradio-app Affected before 4.19.2 Fixed in 4.19.2 Patch available CNA
gradio (PyPI) Vendor— Affected before 4.19.2 Fixed in 4.19.2 Patch available GHSA-48cq-79qq-6f7x

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:gradio_project:gradio::::::python::*	4.16.0 to before 4.19.2	Vulnerable	gradio-app

cpe:2.3:a:gradio_project:gradio:*:*:*:*:*:python:*:* Versions 4.16.0 to before 4.19.2 Vulnerable ·gradio-app

Remediation

Fix · CNA gradio-app/gradio (gradio-app) Fixed in 4.19.2
Fix · GHSA-48cq-79qq-6f7x gradio (PyPI) Fixed in 4.19.2 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2024-1727
2026-10-03 Alias added: GHSA-48cq-79qq-6f7x

References

Other 3

TI-2024-26222 Gradio v4.36.1 was discovered to contain a code injection vulnerability via the component… CVSS 3.1CRITICAL 9.8
TI-2024-01607 Local File Inclusion in gradio-app/gradio CVSS 3.1HIGH 7.5
TI-2024-00889 LFI in Gradio CVSS 3.1CRITICAL 9.4
TI-2025-16852 Gradio Blocked Path ACL Bypass Vulnerability CVSS 4.0HIGH 8.7
TI-2026-22690 Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing CVSS 3.1HIGH 8.6
TI-2024-09866 Path Traversal in gradio-app/gradio CVSS 3.0HIGH 8.2

See all 49 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences