Gradio Project Gradio vulnerabilities
50 published vulnerabilities in Gradio Project Gradio. The most were published in 2024 (33), and 7 so far in 2026.
Gradio Project Gradio vulnerabilities by year
2021
2022
2023
2024
2025
2026
Most exploited Gradio Project Gradio vulnerabilities
- CVE-2024-39236 Withdrawn Advisory: Gradio was discovered to contain a code injection vulnerability via the component /gradio/component_meta.py
- CVE-2023-6572 Command Injection in gradio-app/gradio
- CVE-2022-24770 Improper Neutralization of Formula Elements in a CSV File in Gradio Flagging
- CVE-2026-49119 Gradio < 6.16.0 Path Traversal via FileExplorer.preprocess()
- CVE-2025-23042 Gradio Blocked Path ACL Bypass Vulnerability
- CVE-2024-4325 Server-Side Request Forgery (SSRF) in gradio-app/gradio
- CVE-2024-1540 Command Injection in gradio-app/gradio via deploy+test-visual.yml workflow
- CVE-2026-28416 Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
- CVE-2024-10648 Path Traversal in gradio-app/gradio
- CVE-2024-47871 Insecure communication between the FRP client and server in Gradio
- CVE-2021-43831 Files on the host computer can be accessed from the Gradio interface
- CVE-2026-48545 Gradio < 6.15.0 Cookie Injection via Shared Proxy Client
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.