PyPIgradioGHSA-973g-55hp-3frwPYSEC-2026-1413
No fixed version published. Check the advisory or remove the package.
Affected versions
| If you run | Upgrade to |
|---|---|
| 4.36.0 and earlier | No fix published |
CVE-2024-4325 Public exploit High · 8.6 EPSS 37.1%
Server-Side Request Forgery (SSRF) in gradio-app/gradio
gradio-app · gradio-app/gradio
Summary
Gradio (gradio-app/gradio, version 4.21.0) contains a Server-Side Request Forgery flaw in the /queue/join endpoint and the save_url_to_cache function, where a user-supplied path value expected to be a URL is used to issue HTTP requests without sufficient validation. An unauthenticated remote attacker can send crafted requests over the network, with no user interaction or special configuration required, to make the server reach the local network or the AWS metadata endpoint and so access internal servers.
Official description · CVE.org
A Server-Side Request Forgery (SSRF) vulnerability exists in the gradio-app/gradio version 4.21.0, specifically within the `/queue/join` endpoint and the `save_url_to_cache` function. The vulnerability arises when the `path` value, obtained from the user and expected to be a URL, is used to make an HTTP request without sufficient validation checks. This flaw allows an attacker to send crafted requests that could lead to unauthorized access to the local network or the AWS metadata endpoint, thereby compromising the security of internal servers.
Priority scorePatchfirst’s 0 to 100 ranking. It adds points for CISA KEV listing, ransomware use, EPSS, threat reports, public exploit code and CVSS. Every CVE page shows the breakdown. Breakdown
65.7 / 100
- Exploited
- Yes, in VulnCheck KEV
- Reports
- 0
- Tactics
- 0/15
Exploitation timelineDated milestones for a CVE: when it was disclosed, when exploit code became public, when exploitation was confirmed, and when threat reports named it.
First seen exploited 4 months after disclosure.
- Disclosedday 0
- First seen exploitedVulnCheck KEV evidence+4 mo
MITRE ATT&CKA public catalogue of the techniques attackers use, maintained by MITRE. Patchfirst uses it to describe what attackers do with a vulnerability. techniques
No techniques linkedNo ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.
Am I affected? What do I upgrade to?
From GitHub Security Advisories and OSV1 package in 1 ecosystem. Main package: gradio.