Read the docs
TI-2024-32121 Aliases CVE-2024-47867GHSA-8c87-gvhj-xm8m

Lack of integrity check on the downloaded FRP client in Gradio

Priority LOW 11CWE-345Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Attack requirements
Present
Impact type
Security bypass, Code execution
Confidentiality · integrity · availability
Low · Low · Low
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-345 and CWE-494.

Summary

Gradio is an open-source Python package designed for quick prototyping. This vulnerability is a **lack of integrity check** on the downloaded FRP client, which could potentially allow attackers to introduce malicious code. If an attacker gains access to the remote URL from which the FRP client is downloaded, they could modify the binary without detection, as the Gradio server does not verify the file's checksum or signature. Any users utilizing the Gradio server's sharing mechanism that downloads the FRP client could be affected by this vulnerability, especially those relying on the executable binary for secure data tunneling. There is no direct workaround for this issue without upgrading. However, users can manually validate the integrity of the downloaded FRP client by implementing checksum or signature verification in their own environment to ensure the binary hasn't been tampered with.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00213 11th percentileScored 2026-11-07
Fix Fixed gradio (gradio-app): 5.0gradio (PyPI): 5.0.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
gradio-appgradiobefore 5.05.0Patch availableCNA
—gradio (PyPI)before 5.0.05.0.0Patch availableGHSA-8c87-gvhj-xm8m
  • gradio Vendorgradio-app Affected before 5.0 Fixed in 5.0 Patch available CNA
  • gradio (PyPI) Vendor— Affected before 5.0.0 Fixed in 5.0.0 Patch available GHSA-8c87-gvhj-xm8m

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:gradio_project:gradio:*:*:*:*:*:python:*:*before 5.0.0Vulnerablegradio-app
  • cpe:2.3:a:gradio_project:gradio:*:*:*:*:*:python:*:* Versions before 5.0.0 Vulnerable ·gradio-app

Remediation

  • Fix · CNA gradio (gradio-app) Fixed in 5.0
  • Fix · GHSA-8c87-gvhj-xm8m gradio (PyPI) Fixed in 5.0.0 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-47867
  2. 2026-10-03 Alias added: GHSA-8c87-gvhj-xm8m

References

Advisory 2

Other 2

  • TI-2024-26222 Gradio v4.36.1 was discovered to contain a code injection vulnerability via the component… CVSS 3.1CRITICAL 9.8
  • TI-2024-01607 Local File Inclusion in gradio-app/gradio CVSS 3.1HIGH 7.5
  • TI-2024-00889 LFI in Gradio CVSS 3.1CRITICAL 9.4
  • TI-2025-16852 Gradio Blocked Path ACL Bypass Vulnerability CVSS 4.0HIGH 8.7
  • TI-2026-22690 Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing CVSS 3.1HIGH 8.6
  • TI-2024-09866 Path Traversal in gradio-app/gradio CVSS 3.0HIGH 8.2
See all 49 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences