CVE-2024-1728 in the critical feed json
Local File Inclusion in gradio-app/gradio
published 2024-04-10 2 y ago modified 2026-10-27 12 d ago also GHSA-m842-4qm8-7gpq , PYSEC-2026-345 , EUVD-2024-1079
- cvss
- 7.5
- version 3.0, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 85.4%
- EPSS 85.4% chance of exploitation in 30 days, percentile 99.7%
- public exploits
- 0
- none known, plus a Nuclei check
Summary
gradio-app/gradio is vulnerable to a local file inclusion vulnerability due to improper validation of user-supplied input in the UploadButton component. Attackers can exploit this vulnerability to read arbitrary files on the filesystem, such as private SSH keys, by manipulating the file path in the request to the `/queue/join` endpoint. This issue could potentially lead to remote code execution. The vulnerability is present in the handling of file upload paths, allowing attackers to redirect file uploads to unintended locations on the server.
Patch / fix
CISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- yes
- Technical impact
- partial
- Assessed
- 2 y ago
Exploit prediction
85.39% chance of exploitation in the next 30 days, higher than 99.7% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- Nuclei template Gradio > 4.19.1 UploadButton - Path Traversal nuclei detection template
- huntr.com https://huntr.com/bounties/9bb33b71-7995-425d-91cc-2c2a2f2a068a referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.0 | 7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| NVD | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| OSV | 3.1 | 8.1 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
| GitHub | 3.1 | 8.1 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | gradio | <4.19.2 |
4.19.2 |
Affected products
- gradio-app gradio-app/gradio
- gradio_project gradio
Classification
- Weakness
-
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory
References
-
github.com
/gradio-app/gradio/commit/16fbe9cd0cffa9f2a824a0165beb43446114eec7
web, patch
-
huntr.com
/bounties/9bb33b71-7995-425d-91cc-2c2a2f2a068a
web, exploit, third-party-advisory
-
github.com
/gradio-app/gradio/security/advisories/GHSA-m842-4qm8-7gpq
web
-
nvd.nist.gov
/vuln/detail/CVE-2024-1728
advisory
-
github.com
/gradio-app/gradio
package
-
github.com
/pypa/advisory-database/tree/main/vulns/gradio/PYSEC-2026-345.yaml
web
-
pypi.org
/project/gradio
web, package
-
github.com
/advisories/GHSA-m842-4qm8-7gpq
advisory
Sources
- CVE List CVE-2024-1728
- GitHub Advisory GHSA-m842-4qm8-7gpq
- NVD CVE-2024-1728
- OSV PYSEC-2026-345
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.