Is CVE-2024-39236 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2024-39236 being exploited in the wild.

How severe is CVE-2024-39236?

Critical severity, with a CVSS score of 9.8, published 1 July 2024.

Which products and versions are affected?

gradio (PyPI) = 4.36.1, ECOSYSTEM:introduced=0,last_affected=4.36.1.

Is there a fix for CVE-2024-39236?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2024-39236 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2024-39236?

Check whether you run gradio (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2024-39236: Gradio code injection in component_meta.py

CVE-2024-39236 · Severity: critical · CVSS 9.8 · Published 2024-07-01

Gradio, a popular Python library for building machine learning web interfaces, was reported to have a code injection vulnerability. If exploited, an attacker could potentially execute arbitrary code on the server hosting the Gradio application. However, the advisory was later withdrawn because the issue only occurs when a developer runs specifically crafted, untrusted code that uses the library, rather than being a vulnerability in the library's standard operation.

Technologies: gradio (PyPI). Vendors: PyPI.

Quick answers

Is CVE-2024-39236 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2024-39236 being exploited in the wild.
How severe is CVE-2024-39236?: Critical severity, with a CVSS score of 9.8, published 1 July 2024.
Which products and versions are affected?: gradio (PyPI) = 4.36.1, ECOSYSTEM:introduced=0,last_affected=4.36.1.
Is there a fix for CVE-2024-39236?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2024-39236 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2024-39236?: Check whether you run gradio (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A code injection vulnerability (CWE-94) was identified in Gradio v4.36.1 within the 'gradio/component_meta.py' component. The flaw allegedly allowed for arbitrary code execution via crafted input. Following further review, the advisory was withdrawn by the maintainers because the vulnerability is only reachable if a user executes specifically malicious code that utilizes the Gradio library, rather than being an exploitable flaw in the library's handling of external user input in a standard deployment. The original CVSS score was 9.8, reflecting the potential for unauthenticated remote code execution.

Affected products

Gradio Gradio 4.36.1

Identifiers

CVE-2024-39236
GHSA-9v2f-6vcg-3hgv
PYSEC-2024-274

Timeline

2024-07-01: disclosed
2024-07-01: advisory: Original GHSA published
2025-10-17: other: Advisory withdrawn by GitHub/Maintainers

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.