Executive brief
Gradio allows users to access arbitrary files
Affected products
- PyPI gradio
Junglewise Threat Intelligence
CVE-2024-1728: PYSEC-2026-345 - Gradio allows users to access arbitrary files
CVE-2024-1728 · Severity: low · CVSS 3.1 · Published 2026-06-29
Technologies: gradio (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1423 - Gradio CORS Origin Validation Bypass Vulnerability
- PYSEC-2026-1410 - Gradio DOS in multipart boundry while uploading the file
- PYSEC-2026-1411 - Gradio Vulnerable to Open Redirect
- PYSEC-2026-1418 - Gradio Path Traversal vulnerability
- PYSEC-2026-1417 - Gradio Vulnerable to Arbitrary File Deletion