CVE-2024-4254 Secrets Exfiltration in gradio-app/gradio

High 7.1 Published 4 Jun 2024 Updated 21 Oct 2025

Attackers can exfiltrate sensitive secrets like AWS keys and tokens by exploiting unsafe GitHub Actions workflow configurations in the Gradio repository.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2024-4254?

CVE-2024-4254 is a high-severity vulnerability in Gradio Project Gradio, published on 4 Jun 2024. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

The 'deploy-website.yml' workflow in the gradio-app/gradio repository, specifically in the 'main' branch, is vulnerable to secrets exfiltration due to improper authorization. The vulnerability arises from the workflow's explicit checkout and execution of code from a fork, which is unsafe as it allows the running of untrusted code in an environment with access to push to the base repository and access secrets. This flaw could lead to the exfiltration of sensitive secrets such as GITHUB_TOKEN, HF_TOKEN, VERCEL_ORG_ID, VERCEL_PROJECT_ID, COMMENT_TOKEN, AWSACCESSKEYID, AWSSECRETKEY, and VERCEL_TOKEN. The vulnerability is present in the workflow file located at https://github.com/gradio-app/gradio/blob/72f4ca88ab569aae47941b3fb0609e57f2e13a27/.github/workflows/deploy-website.yml.

Weakness: CWE-214

Which versions are affected by CVE-2024-4254?

It affects 1 product.

Products include Gradio Project Gradio.

How do I fix CVE-2024-4254?

No fix has been published for CVE-2024-4254 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-4254 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-4254 exists.

Public exploit code: 1 proofs of concept on GitHub.

All Gradio Project Gradio vulnerabilities

Sources

Also known as GHSA-fc78-c36r-cc59.