CVE-2025-5320 json
gradio-app gradio CORS is_valid_origin privilege escalation
published 2025-05-29 17 mo ago modified 2026-07-07 4 mo ago also GHSA-wmjh-cpqj-4v6x , PYSEC-2026-1423 , EUVD-2025-16374
- cvss
- 3.7
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.3%
- EPSS 0.3% chance of exploitation in 30 days, percentile 18%
- public exploits
- 0
- none known
Summary
A vulnerability classified as problematic has been found in gradio-app gradio up to 5.29.1. This affects the function is_valid_origin of the component CORS Handler. The manipulation of the argument localhost_aliases leads to erweiterte Rechte. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- no
- Technical impact
- partial
- Assessed
- 17 mo ago
Exploit prediction
0.27% chance of exploitation in the next 30 days, higher than 18% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- gist.github.com https://gist.github.com/superboy-zjc/aa3dfa161d7b19d8a53ab4605792f2fe#proof-of-concept-poc referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 6.3 | CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N |
| CNA | 3.1 | 3.7 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N |
| CNA | 3.0 | 3.7 | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N |
| CNA | 2.0 | 2.6 | AV:N/AC:H/Au:N/C:N/I:P/A:N |
| CNA | 4.0 | 6.3 | CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| GitHub | 3.1 | 3.7 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N |
| OSV | 3.1 | 3.7 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | gradio | >=5.0.0, <=5.29.1 |
no fix listed |
Affected products
- gradio-app gradio
Classification
References
-
gist.github.com
/superboy-zjc/aa3dfa161d7b19d8a53ab4605792f2fe#proof-of-concept-poc
exploit, web
-
vuldb.com
/?id.310491
vdb-entry, technical-description, web
-
vuldb.com
/?ctiid.310491
signature, permissions-required, web
-
vuldb.com
/?submit.580250
third-party-advisory, web
-
gist.github.com
/superboy-zjc/aa3dfa161d7b19d8a53ab4605792f2fe
related, web
-
nvd.nist.gov
/vuln/detail/CVE-2025-5320
advisory
-
github.com
/gradio-app/gradio
package
-
pypi.org
/project/gradio
package
-
github.com
/advisories/GHSA-wmjh-cpqj-4v6x
advisory
Sources
- CVE List CVE-2025-5320
- GitHub Advisory GHSA-wmjh-cpqj-4v6x
- NVD CVE-2025-5320
- OSV PYSEC-2026-1423
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.