Executive brief
Gradio arbitrary file upload vulnerability
Affected products
- PyPI gradio
Junglewise Threat Intelligence
CVE-2023-41626: PYSEC-2026-1422 - Gradio arbitrary file upload vulnerability
CVE-2023-41626 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: gradio (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1423 - Gradio CORS Origin Validation Bypass Vulnerability
- PYSEC-2026-1410 - Gradio DOS in multipart boundry while uploading the file
- PYSEC-2026-1411 - Gradio Vulnerable to Open Redirect
- PYSEC-2026-1418 - Gradio Path Traversal vulnerability
- PYSEC-2026-1417 - Gradio Vulnerable to Arbitrary File Deletion