CVE-2024-47166— One-level read path traversal in `/custom_component` in Gradio
Quick assessment
Affected
gradio-app gradio
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Gradio是一个开源 Python 库，是通过友好的 Web 界面演示机器学习模型的方法。 Gradio存在路径遍历漏洞，该漏洞源于攻击者利用该漏洞可以通过操纵请求中的文件路径来访问和泄露自定义 Gradio 组件的源代码。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-47166
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
One-level read path traversal in `/custom_component` in Gradio
Source: CVE Program / CVE List V5
Vulnerability Description
Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a **one-level read path traversal** in the `/custom_component` endpoint. Attackers can exploit this flaw to access and leak source code from custom Gradio components by manipulating the file path in the request. Although the traversal is limited to a single directory level, it could expose proprietary or sensitive code that developers intended to keep private. This impacts users who have developed custom Gradio components and are hosting them on publicly accessible servers. Users are advised to upgrade to `gradio>=4.44` to address this issue. As a workaround, developers can sanitize the file paths and ensure that components are not stored in publicly accessible directories.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5
Vulnerability Title
Gradio 路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Gradio是一个开源 Python 库，是通过友好的 Web 界面演示机器学习模型的方法。 Gradio存在路径遍历漏洞，该漏洞源于攻击者利用该漏洞可以通过操纵请求中的文件路径来访问和泄露自定义 Gradio 组件的源代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| gradio-app | gradio | < 4.44 | - |
|
II. Public POCs for CVE-2024-47166
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-47166
请登录查看更多情报信息。
Same Patch Batch · gradio-app · 2024-10-10 · 12 CVEs total
| CVE-2024-47872 | Cross-site Scripting on Gradio server via upload of HTML files, JS files, or SVG files | |
| CVE-2024-47165 | CORS origin validation accepts the null origin in Gradio | |
| CVE-2024-47167 | SSRF in the path parameter of /queue/join in Gradio | |
| CVE-2024-47867 | Lack of integrity check on the downloaded FRP client in Gradio | |
| CVE-2024-47168 | The `enable_monitoring` flag set to `False` does not disable monitoring in Gradio | |
| CVE-2024-47084 | CORS origin validation is not performed when the request has a cookie in Gradio | |
| CVE-2024-47870 | Race condition in update_root_in_config may redirect user traffic in Gradio | |
| CVE-2024-47871 | Insecure communication between the FRP client and server in Gradio | |
| CVE-2024-47164 | The `is_in_or_equal` function may be bypassed in Gradio | |
| CVE-2024-47869 | Non-constant-time comparison when comparing hashes in Gradio | |
| CVE-2024-47868 | Several components’ post-process steps may allow arbitrary file leaks in Gradio |
IV. Related Vulnerabilities
Same product: gradio
-
CVE-2026-59806
Gradio < 6.20.0 - Open Redirect and SSRF via /gradio_api/fil -
CVE-2026-49119
Gradio < 6.16.0 Path Traversal via FileExplorer.preprocess() -
CVE-2026-10783
gradio-app gradio Audio Cache Key save_audio_to_cache weak h -
CVE-2026-48545
Gradio < 6.15.0 Cookie Injection via Shared Proxy Client -
CVE-2026-28416
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.l
Same vendor: gradio-app
-
CVE-2026-59806
Gradio < 6.20.0 - Open Redirect and SSRF via /gradio_api/fil -
CVE-2026-49119
Gradio < 6.16.0 Path Traversal via FileExplorer.preprocess() -
CVE-2026-10783
gradio-app gradio Audio Cache Key save_audio_to_cache weak h -
CVE-2026-48545
Gradio < 6.15.0 Cookie Injection via Shared Proxy Client -
CVE-2026-28416
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.l
Same weakness: CWE-22
-
CVE-2026-105293
Legcord 1.1.0 through 1.3.0 Path Traversal via Theme IPC Han -
CVE-2026-105174
Gerapy Project Management views.py project_create path trave -
CVE-2026-105157
RainyGao DocSys Document Controller doGetTmpFile.do DocContr -
CVE-2026-105144
Drogon Static File Router StaticFileRouter.cc route path tra -
CVE-2026-105125
LaraDashboard before 1.4.8 Path Traversal via /api/translati
V. Comments for CVE-2024-47166
No comments yet