CVE-2022-24770 Improper Neutralization of Formula Elements in a CSV File in Gradio Flagging
Attackers can inject malicious formulas into CSV files via Gradio's flagging feature, leading to arbitrary code execution when opened in spreadsheet software.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2022-24770?
CVE-2022-24770 is a high-severity code injection vulnerability in Gradio Project Gradio, published on 17 Mar 2022. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
`gradio` is an open source framework for building interactive machine learning models and demos. Prior to version 2.8.11, `gradio` suffers from Improper Neutralization of Formula Elements in a CSV File. The `gradio` library has a flagging functionality which saves input/output data into a CSV file on the developer's computer. This can allow a user to save arbitrary text into the CSV file, such as commands. If a program like MS Excel opens such a file, then it automatically runs these commands, which could lead to arbitrary commands running on the user's computer. The problem has been patched as of `2.8.11`, which escapes the saved csv with single quotes. As a workaround, avoid opening csv files generated by `gradio` with Excel or similar spreadsheet programs.
Weakness: CWE-1236
Which versions are affected by CVE-2022-24770?
3 open source packages ship an affected version, including gradio. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
gradio PyPI | All versions | 2.8.11 |
gradio PyPI | All versions | 2.8.11 |
gradio PyPI | All versions | 2.8.11 |
Products include Gradio Project Gradio.
How do I fix CVE-2022-24770?
Upgrade gradio to 2.8.11 or later.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2022-24770 being exploited?
There is no known exploitation of CVE-2022-24770 in the wild and no public exploit code.
Other vulnerabilities in Gradio Project Gradio
- CVE-2024-39236 Withdrawn Advisory: Gradio was discovered to contain a code injection vulnerability via the component /gradio/component_meta.py
- CVE-2023-6572 Command Injection in gradio-app/gradio
- CVE-2026-49119 Gradio < 6.16.0 Path Traversal via FileExplorer.preprocess()
- CVE-2025-23042 Gradio Blocked Path ACL Bypass Vulnerability
- CVE-2024-4325 Server-Side Request Forgery (SSRF) in gradio-app/gradio
Sources
Also known as GHSA-f8xq-q7px-wg8c, PYSEC-2022-229.