Executive brief
Gradio applications running locally vulnerable to 3rd party websites accessing routes and uploading files
Affected products
- PyPI gradio
Junglewise Threat Intelligence
CVE-2024-1727: PYSEC-2026-1409 - Gradio applications running locally vulnerable to 3rd party websites accessing routes and uploading files
CVE-2024-1727 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: gradio (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1423 - Gradio CORS Origin Validation Bypass Vulnerability
- PYSEC-2026-1410 - Gradio DOS in multipart boundry while uploading the file
- PYSEC-2026-1411 - Gradio Vulnerable to Open Redirect
- PYSEC-2026-1418 - Gradio Path Traversal vulnerability
- PYSEC-2026-1417 - Gradio Vulnerable to Arbitrary File Deletion