Live › vulnerability › CVE-2024-1728
Go to dashboardGradio applications exposed through a public link, such as on Hugging Face Spaces, let users read arbitrary files from the machine hosting the app. An attacker can intercept and modify the app's network requests to reach files outside the intended scope.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 16:35 UTC, 0h before NVD. All times on this page are UTC.
Gradio applications that are reachable through a public link, such as a share link or a Hugging Face Space, are exposed because the file access path can be reached from outside. Apps only reachable on a private network or locally are less exposed, but the sources do not say how far that reduces risk. Teams already on 4.19.2 or higher are not affected.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| gradio | pypi | < 4.19.2 | 4.19.2 |
| gradio project gradio | vendor | >= 4.18.0, < 4.19.2 | 4.19.2 |
pip show gradio and compare the version against 4.19.2gradio package to 4.19.2 or higherEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
This vulnerability allows users of Gradio applications that have a public link (such as on Hugging Face Spaces) to access files on the machine hosting the Gradio application. This involves intercepting and modifying the network requests made by the Gradio app to the server.
Yes, the problem has been patched in Gradio version 4.19.2 or higher. We have no knowledge of this exploit being used against users of Gradio applications, but we encourage all users to upgrade to Gradio 4.19.2 or higher.
Fixed in: https://github.com/gradio-app/gradio/commit/16fbe9cd0cffa9f2a824a0165beb43446114eec7 CVE: https://nvd.nist.gov/vuln/detail/CVE-2024-1728
This page as .md · .json · in your agent: get_signal("CVE-2024-1728")
GitHub Advisory Database, CC-BY 4.0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.